51 to 75 of 275 Incident Response Jobs in London

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

autonomy while encouraging responsible AI adoption, experimentation, and innovation. We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt … scale. You’ll design, architect, and develop world-class case management and investigation capabilities in Go, building workflows that connect detections, evidence, and response actions into cohesive cases. You’ll leverage advanced correlation, contextual enrichment, and AI/ML-powered insights to help security teams prioritize threats and automate ...

growth and innovation. You’ll define and lead our security strategy, establish governance and compliance frameworks, strengthen cloud and third‐party security, and drive incident response and resilience planning across the organisation. About You Experience & Expertise 10+ years’ experience in information security, including leadership‐level responsibility Proven experience … building and scaling security and privacy programmes within growing organisations Strong hands‐on knowledge of GDPR, PCI‐DSS, incident response, and resilience planning Experience working within cloud‐first environments, ideally AWS Strong understanding of security within e‐commerce, fintech, or customer‐data‐led businesses Comfortable operating as both ...

United Kingdom. The role focuses on defining and overseeing information security strategy, policies and governance to protect critical assets. The successful candidate will drive incident response, risk management and regulatory compliance, while partnering with executive leadership to align security with business goals and deliver measurable security improvements. #J ...

cyber security function spanning both on-premises and cloud environments. This role is ideal for a security leader with expertise in SecOps and Incident Response, dedicated to managing a skilled team and overseeing the delivery of strategic security operations. Offering a competitive day rate ...

coding practices are integrated throughout the SDLC Track, analyse, and manage application vulnerabilities, using AI-assisted triage and prioritisation to guide remediation efforts Support incident response by investigating application-related security incidents Stay current on the latest security threats, vulnerabilities, and technologies to enhance our security posture Your … genuine interest in going deeper into application security Comfortable with secure coding practices and at least one of: threat modelling, risk assessments, or incident response, with appetite to grow across the rest Proficiency in programming languages such as TypeScript, Python, or similar Experience with cloud and cloud security ...

with teams primarily based in the US Establish and drive adoption of engineering best practices within your team, including the operational rigor (on‐call, incident response, postmortems) required for infrastructure that other teams and external partners depend on Contribute to engineering‐wide initiatives as a member … depth to guide architectural decisions and engage credibly in technical discussions Experience operating production distributed systems, with an understanding of what reliability, observability, and incident response require at scale Excellent communication skills, with the ability to build consensus across teams and time zones Demonstrated success building a culture ...

Cyber Essentials) Experience overseeing governance, risk, and assurance activities Broad technical understanding across networks, cloud, infrastructure Hands-on experience leading or coordinating cyber incident response Ability to translate technical risk into clear, business-focused messaging Experience producing reports, dashboards, and presenting to senior stakeholders Strong people leadership skills … System (ISMS) Ensure alignment with standards such as ISO 27001 and Cyber Essentials Identify, assess, and mitigate cyber risks, maintaining the risk register Lead incident response capability, ensuring plans are tested and effective Monitor the threat landscape and advise on emerging risks and mitigations Manage and develop ...

versioning, contracts, and backward compatibility. Advance operational excellence by defining SLOs, improving observability and alerting, hardening on‐call procedures and runbooks, and leading incident response and post‐mortems. Solve complex distributed system challenges (such as throughput, latency, consistency, and data modeling) with pragmatic decision‐making and balanced tradeoffs. … design, and event‐driven systems, as well as experience with containerization and orchestration (Docker, Kubernetes). Strong operational mindset: expert in observability, monitoring, incident response, performance engineering, and adherence to security best practices. Familiarity with CI/CD pipelines, automated testing strategies (unit, integration, e2e), and modern DevOps ...

Palo Alto Networks is seeking a client-facing Principal Consultant to lead reactive services engagements and manage incident response from start to finish. You will guide clients through containment and long-term remediation, leveraging your expert knowledge in digital forensics. This weekend schedule position runs Friday to Monday ...

Life on the team As the Cyber Incident Readiness Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving the end-to-end security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters. You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response and testing. This includes designing and running realistic incident ...

objectives to mitigate cyber threats. The ideal candidate will have proven leadership experience, a strong understanding of security architectures, and demonstrate excellent skills in incident response and stakeholder management. Ingenico values diversity and inclusion, providing a supportive environment for all candidates. #J-18808-Ljbffr ...

scale. Experience with agentic systems and using AI to support production operations, including familiarity with LLM-based tooling, AI-driven automation, or intelligent incident response systems. Ability to understand complex relationship between the organization and its environment, identify connections, adopt different perspectives and quickly respond to changing circumstances … production operations. Lead and contribute to the cross-SRE AI Ops program, driving the strategic adoption of AI/ML tools to improve incident response, reduce toil, and enhance service reliability across Ads SRE. Focus on optimizing existing systems, build infrastructure, and eliminate work through automation ...

disruption to business operations. The role partners closely with functional and business teams to embed legal and compliance considerations into internal systems, product development, incident response, and business operations. This position has no direct reports but operates at an executive level in the Law Department with significant influence … Strong contracting capability for data privacy and data governance terms, including data access and data rights provisions, security addenda, audit rights, and flowdown clauses. Incident response and regulatory engagement experience, including breach notifications, investigations, and interactions with regulators in the EU. Qualifications You Must Have J.D. (or equivalent ...

trading systems, strengthening Site Reliability Engineering practices across the organisation and partnering with senior business and technology managers to improve architecture, automation, resilience and incident management capabilities. What we will offer you A healthy, engaged and well‐supported workforce are better equipped to do their best work and, more … proactive, data‐determined and automation‐led engineering model Strengthen platform robustness by reviewing architecture, contributing to tooling strategy and setting clear standards for incident response, post‐incident evaluation and risk reduction Act as a senior partner to the Head of Rates Trading, Rates desk heads, technology executives ...

stability of software applications and systems. Provides operational support and leadership for production systems in a "you‐build‐it‐you‐run‐it" culture, including incident response, post‐incident learning, and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes‐oriented ...

with Helm and Kustomize usage. Database DevOps: Liquibase, Flyway (incl. Redgate Flyway), Bytebase, Atlas (Ariga), Sqitch, SchemaHero, Redgate SQL Change Automation, DBmaestro. Site reliability & incident response (incl. AI‐assisted): incident management and postmortems (PagerDuty, Opsgenie, incident.io, Rootly, FireHydrant, Blameless); AIOps/AI SRE (Resolve.ai, Cleric, Traversal, Neubird ...

strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple‐team/assurance, ransomware preparedness, and crisis playbooks. Maintain … executive incident communications, regulator notifications, and post‐incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. Drive ...

Azure DevOps Pipelines : Design, build, and maintain secure, high-speed CI/CD pipelines within Azure DevOps to automate code promotion and MLOps workflows. Incident Management : Lead the response, containment, and resolution of critical platform outages, serving as a primary escalation point for high-priority cloud and infrastructure … fixes to prevent recurrence. Third-Party Operational Coordination : Act as the direct engineering point of contact for external support teams, actively collaborating on active incident tickets, complex escalations, and day-to-day infrastructure maintenance. Cross-Functional Communication : Document complex technical architectures clearly and articulate system requirements, post-mortems ...

improve our ISMS as the backbone for our security controls and initiatives. Drive ongoing improvement of our security processes, tooling, and standards. Lead security incident response and post-incident reviews, turning lessons into stronger defences. Partner with stakeholders across the business to plan, prioritise, and resource security … AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM ...

Azure DevOps Pipelines : Design, build, and maintain secure, high‐speed CI/CD pipelines within Azure DevOps to automate code promotion and MLOps workflows. Incident Management : Lead the response, containment, and resolution of critical platform outages, serving as a primary escalation point for high‐priority cloud and infrastructure … fixes to prevent recurrence. Third‐Party Operational Coordination : Act as the direct engineering point of contact for external support teams, actively collaborating on active incident tickets, complex escalations, and day‐to‐day infrastructure maintenance. Cross‐Functional Communication : Document complex technical architectures clearly and articulate system requirements, post‐mortems ...

transparency, governance, and communication of FNZ platform service performance. The role ensures clients have a clear, accurate understanding of platform availability, performance trends, incident management, and operational risk, while driving continual service improvement across infrastructure, production support, and vendor ecosystems.Key stakeholders:* Client CIO/CTO/Technology teams … monthly and ad-hoc service reporting packs, including: + Platform availability and uptime against SLA + Performance metrics (latency, throughput, capacity utilisation) + Incident volumes, trends, and resolution times* Translate complex engineering data into client-relevant insights and narratives.* Ensure reporting aligns with FNZ’s capacity and performance management ...

dedicated SRE to take real ownership of operational excellence across Cloud Infrastructure. Today, too much critical operational knowledge — vendor relationships, cost management, and incident response — lives with one or two people. Your mission is to take genuine ownership of those domains, make them resilient to any single person … tooling that make them boring. We deliberately pair operational and engineering work so the role grows rather than narrows. What you'll own Incident management & operational excellence — take custody of the incident process: on-call quality, response, post-mortems, and driving down incident count, time ...

cost/timeline ranges), and advise on onboarding security priorities. Security Operations Oversight Oversee security monitoring and key metrics (e.g., vulnerability SLAs, control coverage, incident trends). Ensure incident response readiness through playbooks, tabletop exercises, and post‐incident reviews. Third-Party & Supplier Security Perform vendor risk ...

site and multi-tenant deployment models where required. Implement observability, monitoring, alerting, SLOs and operational health practices for production and customer-facing systems. Lead incident response, post-incident reviews and continuous improvement of platform reliability and operational maturity. Embed security, safety, compliance, auditability and traceability requirements into ...