76 to 100 of 275 Incident Response Jobs in London

cost/timeline ranges), and advise on onboarding security priorities. Security Operations Oversight Oversee security monitoring and key metrics (e.g., vulnerability SLAs, control coverage, incident trends). Ensure incident response readiness through playbooks, tabletop exercises, and post-incident reviews. Third-Party & Supplier Security Perform vendor risk ...

troubleshooting, documentation, and operational runbooks to improve speed and consistency. AIOps and Intelligent Observability: Apply AI to analyze logs, metrics, traces, alerts, and incident history to detect anomalies, identify root causes, reduce noise, and improve mean time to resolution. AI-Enhanced CI/CD Optimization: Use AI to identify … reusable self-service content. AI Workflow Automation: Design AI-assisted automations and lightweight agents that reduce repetitive manual tasks across ticket triage, environment provisioning, incident response, and developer support. Soft Skills: Collaboration: Excellent teamwork and communication skills to work effectively with cross-functional teams. Problem-Solving: Strong analytical ...

best practice Driving automation and reducing manual processes Improving platform performance, reliability and observability Managing source control, deployment frameworks and engineering tooling Supporting incident response and continuous improvement initiatives Developing reusable patterns, templates and standards Promoting DevOps, DevSecOps and Site Reliability Engineering practices Required Skills & Experience ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

Teneo, we provide expert cyber security strategy, risk and response advisory within a multi‐disciplinary environment, working closely with our strategy and communications, risk advisory and restructuring teams across a globally connected platform. We are seeking highly experienced Cyber Response Directors to join our growing global cyber team. … This role is suited to a senior cyber security professional with deep expertise in cyber response and recovery, including advising organisations on remediation and longer‐term post‐incident transformation. You will act as a trusted advisor to senior stakeholders, supporting clients through complex and high‐stakes situations. ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

design engineering and ensure compliance with MOD security standards. Enable and govern Infrastructure as Code (IaC) practices across teams and environments. Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked. Document security processes, controls and operational runbooks in Confluence. ...

secure-by-design engineering and ensure compliance with MOD security standards. Enable and govern Infrastructure as Code practices across teams and environments. Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked. Document security processes, controls and operational runbooks in Confluence. ...

design engineering and ensure compliance with CLIENT security standards. Enable and govern Infrastructure as Code (IaC) practices across teams and environments. Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked. Document security processes, controls and operational runbooks in Confluence. ...

including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define and own the GRC programme, including the ISMS, policy framework, risk registers, and audit readiness ...

pipelines, GitOps workflows, and modern cloud deployment practices, with a strong focus on automation and operational efficiency. Strong knowledge of observability, monitoring, alerting, incident response, and troubleshooting complex infrastructure, networking, security, and deployment issues. Desired Technical Skills Experience supporting machine learning workloads or MLOps practices in cloud environments. ...

NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber controls engineeringCyber resilience, incident response and operational securityIntegration of security into DevOps and cloud transformationUnderstanding of emerging risks and controls associated with AI and agentic systems, including … secure AI adoption, model risk, data protection, and the application of AI within cybersecurity (e.g. threat detection, automation and response)Consulting and commercial skills:Strong stakeholder engagement skills, with the ability to influence at C‐suite and senior leadership levelExcellent communication and storytelling capability, translating complex cyber topics into ...

Relationships CTTO — Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) — Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering — Coordinates on DevSecOps integration and CI/CD infrastructure requirements. Head of Infrastructure & Cloud — Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate — multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership — has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

standards. Reviewing and enhancing information security policies, procedures and controls. Responding to potential security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes … tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with the ability to explain technical concepts ...

firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001. Strong incident response, analytical, and problem solving skills. Knowledge of AI/ML risks and AI governance. Experience with phishing campaigns, penetration testing, and remediation. ...

insurance sectors. Broad knowledge of security domains: network security, endpoint protection, secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance. Familiarity with regulatory requirements and industry standards (e.g., NIST, CIS, BMA, PRA, APRA, MAS). Strong analytical and problem‐solving skills. ...

vulnerability management — focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms • Supporting incident response and triage of alerts requiring business context • Influencing engineering, product, and senior stakeholders on security direction What We're Looking ...

supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001. Understanding of healthcare data protection, ideally NHS/UK standards. Strong incident response, analytical, and problemsolving skills. Knowledge of AI/ML risks and AI governance. Experience with phishing campaigns, penetration testing, and remediation. Excellent communication ...

exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities. Understanding of security operations concepts, including security monitoring, incident response, SIEM platforms, managed detection and response (MDR), and threat investigation practices. Knowledge of cloud and hybrid environments (preferably GCP), alongside ...

critical milestones. Engage in solution architecture and pre‐sales deal shaping. Develop and maintain long‐term strategic client relationships. Design, implement, and integrate security, incident, and event management solutions into Security Operations, with a particular interest in Azure Sentinel. Understand threat modelling, risk, and how to mitigate risks concerning … applications from internal and external threat actors. Have a deep understanding of incident response processes and techniques for cyber recovery. Understand security operations centers, their functions, and roles. Have a good understanding of the Microsoft platforms across Windows, Microsoft 365, and Azure. Understand techniques and approaches used ...

governance. Automation & CI/CD: Develop, maintain, and continuously improve automated tooling, configuration management, and CI/CD pipelines for building and deploying systems. Incident Management: Maintain 24x7 availability of production systems. Lead incident response, conduct post-mortem activities, identify root causes, and execute plans to permanently ...

event-driven workflows. Automation & Toil Reduction at Scale Lead the design of automation frameworks that eliminate manual operational tasks across multiple domains. Translate incident learnings and operational inefficiencies into scalable automation and preventative controls. Drive adoption of automation-first principles, reducing dependency on human-driven processes. Contribute … telemetry, monitoring, alerting, and operational visibility across all critical systems. Ensure services are observable, measurable, and support proactive detection of issues. Improve operational readiness, incident response effectiveness, and time-to-recovery through engineering solutions. CI/CD & Platform Integration Contribute to the design of CI/CD patterns ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...