326 to 350 of 738 Incident Response Jobs in London

network infrastructure into a coherent detection stack Write, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviour Lead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercises Perform forensic analysis … initial access, persistence, privilege escalation, exfiltration) and can map an investigation to it Comfortable scripting in Python or similar to automate enrichment, triage, and response Strong ownership mindset: sees things through end-to-end with little guidance Desirable Deep familiarity with an EDR platform (CrowdStrike, SentinelOne, Defender ...

identify trends in team velocity, providing early warnings and performance feedback to the Product Lead, escalating concerns with capacity and velocity where necessary. Incident Response & Escalation: Monitor and oversee incident management, proactively driving engineering teams to escalation and follow through with stakeholder informing when necessary. Voice ...

management life cycle of code, third party and platform vulnerabilities, ensuring remediation paths are transparent, risk-based, and tracked to closure. Security Operations & Incident Response: Oversee detection engineering, continuous threat monitoring, and serve as the accountable executive for major incident escalations. 2. Platform & Infrastructure Engineering Cloud & Developer ...

auto-remediate global SaaS infrastructure. What you'll do Technical Leadership & Architecture: Define the technical roadmap and architecture for AI-assisted observability, automated incident response, and self-healing cloud infrastructure. Agentic Workflows & Tooling: Design and build production-grade AI agents, MCP tool integrations, and deterministic evaluation pipelines … quality guardrails. Reliability & Scalability Engineering: Partner with application and infrastructure teams to define SLIs/SLOs, handle error budgets, and lead deep-dive post-incident reviews (PIRs). Mentorship & Collaboration: Mentor senior and mid-level engineers, establish engineering best practices, and drive alignment across global development and operations teams. ...

managing SIEM systems, developing use cases, and refining security monitoring practices. Ensuring the integrity and performance of security infrastructure and collaborating closely with incident response teams to detect and respond to threats are key components of the role. Success hinges on delivering robust security solutions and continuously improving … Build and optimise security tools for detection, remediation, and orchestration. Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation. Develop, test, and deploy advanced threat detection use cases based on vulnerability insights. Analyse security controls and collaborate with the SOC team ...

environment Proactively identify risks, bottlenecks, and failure patterns before they impact users Define and track appropriate SLIs/SLOs for critical services Conduct post‐incident reviews and drive lasting improvements Supporting AI‐Augmented Development A large proportion of the solutions you will support are built rapidly using structured … scale Actively use AI tools (e.g. Claude, Copilot, or similar) to accelerate your own work: writing scripts, diagnosing issues, generating runbooks, reviewing configurations Diagnosis & Incident Response Take ownership of vague or ambiguous production issues (e.g. “it’s running slow”, “the server keeps falling over”) and drive them through ...

sound engineering trade‐offs around scalability, maintainability, performance, and product impact. Own reliability and operational excellence, including telemetry, SLOs, error budgets, on‐call rotations, incident response, and continuous service improvement. Champion DevOps practices, including CI/CD, deployment automation, monitoring, and application‐level operations. Collaborate with Platform Engineers … Experience designing and building scalable APIs, services, and cloud‐native applications. Strong understanding of DevOps practices, including CI/CD, deployment, monitoring, automation, and incident response. Experience delivering secure, observable, high‐quality production software. Strong focus on code quality, automated testing, documentation, performance, and maintainability. Ability to lead technical ...

security best practices across the business. Administer security tools, including multi-factor authentication (MFA), mail filtering and Anti-Virus software. Participate in vulnerability management, incident response coordination, and system security reviews. Help maintain system documentation, asset registers, and compliance records in line with IT policies and data protection … Process & Documentation Maintain up‐to‐date documentation of IT systems, configurations, procedures, and security protocols. Support the continuous improvement of IT operational processes and incident management workflows. Skills & Experience Required Proven experience in a Systems Analyst, IT Support Analyst, or Desktop Support role, ideally within a retail, luxury ...

also drives continuous improvement in third-party cyber risk processes, tooling and reporting, working closely with internal partners such as Procurement, Supplier Management and Incident Management, as well as key external providers and industry stakeholders.Role responsibilitiesAct as the FCA’s cyber lead for Third Party Risk Management, setting strategy … England Critical Third Party oversight regimeAct as the cyber lead for third-party incidents, providing risk assessment, technical advice and support for supplier engagement, incident response and senior decision-makingDrive continuous improvement of third-party cyber risk capabilities through process optimisation, tooling, horizon scanning, enhanced management information ...

monolith to microservices on EKS. Define standards for containers, runtime environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI/SLOs, incident management, DR/BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI/CD pipelines, IaC, and software supply chain … networking, KMS, RDS, and multi-account architecture. Hands-on Kubernetes, CI/CD, Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands ...

also drives continuous improvement in third-party cyber risk processes, tooling and reporting, working closely with internal partners such as Procurement, Supplier Management and Incident Management, as well as key external providers and industry stakeholders. Role responsibilities Act as the FCA’s cyber lead for Third Party Risk Management … Critical Third Party oversight regime Act as the cyber lead for third-party incidents, providing risk assessment, technical advice and support for supplier engagement, incident response and senior decision-making Drive continuous improvement of third-party cyber risk capabilities through process optimisation, tooling, horizon scanning, enhanced management information ...

detection content that security operation teams depend on, and hunt proactively for threats that existing controls do not catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across … evaluate their output Malware analysis, digital forensics, or reverse engineering fundamentals Specific Technologies SIEM platforms including Splunk and Elasticsearch. Endpoint detection and response platforms including Tanium, CrowdStrike, and SentinelOne. Network detection and response tooling and network traffic analysis. MITRE ATT&CK. Scripting and automation in Python or PowerShell. ...

requires a credible engineering background. The successful candidate is expected to work directly across Azure platform engineering, CI/CD, Bicep/ARM, automation, incident response and operational controls, while leading the team and setting standards. They must be able to challenge technical decisions, understand operational risk … mode, rollback and supportability thinking; involve senior engineers and technical leadership where specialist authority is required. Own platform SLAs/SLOs, service health, major-incident command, root-cause analysis, disaster recovery, business continuity testing and continuous service improvement. Operational Controls, Standards & Compliance Take day-to-day ownership within ...

Knowledge of automation, API integrations, telemetry pipelines, and security orchestration. Experience scripting with PowerShell, Python, or Bash. Strong understanding of SOC operations, detection engineering, incident response, and attacker methodologies. Excellent stakeholder engagement skills with the ability to communicate technical concepts to both technical and non-technical audiences. Experience … architecture roles. This is a fantastic opportunity for an experienced SOC Engineer who wants to shape the future of a modern Managed Detection & Response service while working with one of the industry's leading security platforms. ...

Knowledge of automation, API integrations, telemetry pipelines, and security orchestration. Experience scripting with PowerShell, Python, or Bash. Strong understanding of SOC operations, detection engineering, incident response, and attacker methodologies. Excellent stakeholder engagement skills with the ability to communicate technical concepts to both technical and non-technical audiences. Experience … architecture roles. This is a fantastic opportunity for an experienced SOC Engineer who wants to shape the future of a modern Managed Detection & Response service while working with one of the industry's leading security platforms. ...

configurations, owners, evidence and testing methods. * Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements. * Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews … identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps. * Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation. * Ability to automate security and assurance processes using technologies such ...

maintain and debug reproducible multi-language CI pipelines, and optimize CI performance across large compute clusters. Build and maintain infrastructure observability, alerting, runbooks, and incident response workflows for Fractile's infrastructure. IaC TODO Scale and maintain Fractile's Bazel monorepo as we continue growing across Python, C++, Rust … Pulumi) Experience with monitoring and observability tooling (Prometheus, Grafana, or similar) Working knowledge and practice of DevOps/SRE principles: SLOs, alerting design, incident management, and on‐call practice Strong proficiency in at least one systems or scripting language used for tooling (Python preferred; Go or Rust also relevant ...

infrastructure. You’ll be responsible for the reliability, scalability, and operability of our systems. That means CI/CD pipelines, infrastructure‐as‐code, observability, incident response, and the day‐to‐day health of production. You’ll make sure we can ship with confidence and sleep at night. Shape … code (we use Terraform, SST/CDK) A strong grasp of what it takes to keep production systems reliable: CI/CD, observability, incident management, capacity planning Experience designing systems that scale – and debugging them when they don’t Enough breadth across the stack to understand how infrastructure decisions ...

securely generated, stored, and used. Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches. Identification of advancements in to support the innovation and adoption of new cryptographic technologies and techniques. Collaboration across the bank, including … Ping Identity platforms (PingGateway, PingAM, PingIDM) is a plus Experience in using AI-assisted security scanning tools and automated security testing frameworks Background in incident response, security monitoring, and building threat detection capabilities for identity-related threats Security certifications such as CISSP, CEH, OSCP, or equivalent demonstrating deep ...

Prometheus and Grafana Understanding of OS patching for Windows Server and RHEL as part of governance practices Background in risk management, compliance frameworks and incident response processes Excellent leadership, communication and stakeholder management skills #J-18808-Ljbffr ...

remediation Improving IT policies, processes, security awareness and governance Leading infrastructure upgrades, migrations and continuous improvement projects Supporting backup, disaster recovery, business continuity and incident response Maintaining compliance with security frameworks including Cyber Essentials Plus and ISO 27001 Managing relationships with IT suppliers, licensing providers and third-party ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

proportionate, practical controls Challenging network, infrastructure and cloud configurations constructively with engineers and suppliers Providing expertise and oversight across vulnerability management, security monitoring and incident response Explaining security risk and its business impact clearly to Executives Seeing improvements through to implementation with teams who do not report ...

throughout the software delivery lifecycle Optimise Azure environments for performance, scalability, reliability and cost efficiency Support model-serving infrastructure and AI observability capabilities Lead incident response and drive continuous improvement across production environments Work closely with engineering teams delivering microservices and distributed cloud-native applications Required Experience Significant ...

including least‐privilege access controls, secrets management, encryption, network segmentation, and auditability Improve platform reliability through observability tooling — logging, metrics, and tracing — alongside alerting, incident response practices, and performance and cost optimization Collaborate with stakeholders to translate business and technical requirements into scalable platform designs, and document standards ...