76 to 100 of 757 Incident Response Jobs in London

will connect cybersecurity processes with the teams responsible for investigating and resolving potential data loss events, and ensure that there is coordination across technical, Incident Response, HR, Risk, and Legal teams, bringing clarity to complex cases and helping ensure that issues are handled effectively and appropriately. Lead … operate DLP technologies, ensuring technical capabilities support program requirements. Provide oversight of the DLP alert and escalation process end-to-end, partnering with Incident Response to ensure alerts are triaged effectively and route to the right investigation and escalation paths. Act as the security partner to HR, Legal ...

will be a key part of the Security Operations Centre (SOC). The Security Operations Specialist provides Second and Third Line review, Analysis and Incident Response for Security events and incidents reported to the SOC, responding in line with agreed SLA's. The role directly supports our external … security reports to identify trends and working with teams to develop strategies to drive secure behaviours throughout the business Form part of the Cyber Incident Response team as a technical SME Maintaining and delivery of Phishing campaigns, reporting and remediation management Operational and Security maintenance of Security tooling ...

Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures Establish appropriate requirements for security logging, monitoring, alerting, threat detection and incident response Review technical architecture and solution designs, identifying security weaknesses, control gaps, dependencies and areas requiring further assurance Assess migration strategies and cutover … assurance activities, including validation of security controls before major migrations or go-live decisions Provide security input into operational readiness, ensuring that monitoring, alerting, incident response and support arrangements are in place before services transition into production Align programme designs with organisational security policies, information-security standards, data ...

Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies. Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: Cloud Infrastructure/Security. Endpoint Detection and Response. Perimeter detection … tooling. Investigating and responding to security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. About your Skills We’re open-minded when it comes ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

operating culture focused on ownership, automation, reliability and continuous improvement. Remain highly hands‐on, working directly with engineers on production issues, Kubernetes troubleshooting, incident response, deployment automation, observability, capacity management and service resilience. Drive the evolution of SaaS engineering towards a more automated model, reducing manual intervention, operational … through better tooling, workflow automation and self‐healing capabilities. Explore and adopt appropriate Agentic AI and intelligent automation capabilities to improve operational decision support, incident triage, runbook execution, knowledge retrieval, change preparation and service management workflows. Own SaaS operational standards, including runbooks, monitoring, alerting, incident management, post‐incident ...

. Focus on automation and orchestration (SOAR) to reduce manual overhead and ensure security controls are consistently enforced across a global, multi-cloud environment; Incident Response Leadership: Lead the technical response to high-priority security incidents. Drive the containment, eradication, and recovery phases, while coordinating communication between … technical teams and senior stakeholders. Conduct deep-dive root cause analyses and develop long-term engineering roadmaps to prevent incident recurrence; Compliance & Security Assurance: Lead internal security audits and maturity assessments. Ensure systems align with international standards (e.g., ISO 27001) and regulatory requirements. Define the technical standards that validate ...

conversation around what flexibility could look like for you. The roles main functional responsibilities include: Management of a small team of technical specialists delivering Incident, Threat, Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security … externally sourced services. Implement (and maintain) clear UK owned processes and procedures as required for all aspects of Operational Security Through team, lead the response to UK impacting security incidents and personal data breaches, problem solve and co-ordinate across relevant teams to drive a rapid return ...

global financial system is a foundational priority, and the Cybersecurity Operations organization is central to that mission. Within it, the Detection and Response team serves as the front line of the firm's cyber defense, operating a global "follow-the-sun" model that delivers 24/7 monitoring, detection … response across regions. The London SOC is a critical hub anchoring coverage across EMEA, working seamlessly with partner centers worldwide to ensure continuous, uninterrupted protection. Role Overview This is a hands-on detection and response role at the core of the firm's cyber defense operations. The analyst ...

that address security requirements, helping enterprise organizations strengthen vulnerability management, speed up remediation and build greater cyber resilience. Responsibilities Implement and configure ServiceNow Vulnerability Response and Security Incident Response, including VR groups, remediation rulesets and risk scoring informed by CMDB data. Connect vulnerability scanners, such as Tenable … delivery priorities on track. Create clear high-level designs, technical documentation and user acceptance testing summaries. Skillset Extensive hands-on experience with ServiceNow Vulnerability Response and/or Security Incident Response, alongside familiarity with Unified Security Exposure Management (USEM). ServiceNow CSA, CIS-VR, an equivalent USEM ...

assigned cybersecurity advisory engagements for policyholders, working independently where appropriate and collaborating with the wider team on more complex engagements. Design and facilitate cyber incident tabletop exercises, helping clients evaluate their response capabilities, identify weaknesses and improve their preparedness. Deliver security awareness training, cyber risk briefings, workshops … record of independently delivering external stakeholder-facing work. Strong understanding of cybersecurity fundamentals, including identity and access management, endpoint and network security, vulnerability management, incident response, backup and recovery, and business resilience. Good understanding of common cyberattack methods, how threats can affect organisations and the security controls that ...

cyber controls for the Y TREE business. This is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities. The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands … hands-on Security Analyst, closely interacting with multiple technology disciplines to collectively improve the security posture of Y TREE’s technologies. SOC Collaboration & Incident Response: Collaborate with an externally-managed SOC; act as the escalation point for Y TREE, triage and prioritise issues, manage the issue lifecycle ...

/CD controls. Oversee vulnerability management, ensuring risks are identified, prioritised, owned and remediated in line with agreed service levels. Support and test incident-response processes, coordinating technical response when required and ensuring lessons learned lead to measurable improvements. Work with teams on security assessments, threat modelling … penetration testing and control reviews, turning findings into practical remediation plans. Increase automation across security operations to improve coverage, consistency and response times. Who you are Proven experience leading security engineering, platform engineering, cloud-security or application-security teams. A strong record of delivering complex security or technology programmes ...

Grafana/Datadog/ELK Azure Monitor CloudWatch Understanding of SRE concepts including: Service Level Indicators (SLIs) and Service Level Objectives (SLOs) Error Budgets Incident Management Root Cause Analysis Blameless Post-mortems Database Reliability Engineering Own and improve the reliability, availability, scalability, and performance of production database services. Design … integration and database deployment modernization. Partner with software engineering teams to improve database reliability and deployment processes. Drive cloud migration and modernization initiatives. Observability & Incident Response Implement monitoring, alerting, dashboards, and operational runbooks. Participate in on-call support and incident response activities. Lead root cause analysis ...

performance and security while helping colleagues grow. Work with Data Engineering colleagues on interfaces, data contracts, data quality and operational failure modes. Contribute to incident response, post-incident learning and continuous improvement of the services you support. Document technical decisions and operational knowledge so the team … wider platform environment. AI-assisted engineering tools such as Claude Code or Codex, used with disciplined review and validation. Agile planning, code review, incident response and collaborative technical documentation. Why you’ll love it here Salary c. £80k Flexible, hybrid working. You'll spend a minimum ...

Manager, Digital Forensics and Incident Response# Manager, Digital Forensics and Incident Response*Aon***London, England**Hybrid · Manager · Full-time### The RoleThis position involves managing and performing forensic investigations into cybersecurity incidents, including network intrusions, malware attacks and data breaches. Responsibilities include evidence preservation, host and network analysis ...

availability standards. Supply Chain Resilience: Assess the security posture of third-party APIs and integrations to prevent data leaks or service disruptions. Operational Excellence & Incident Response Incident Commander: Lead the response to information security incidents. Act as the primary escalation point, coordinating containment while providing clear ...

next step in your career. The role As a Senior CSIRT Analyst you will play a key role in G-Research’s Cyber Security Incident Response Team (CSIRT), specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt … corporate Windows environments. You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating and improving the team’s effectiveness against advanced adversaries. ...

scheduled information security on‐call rotation; assess urgent alerts and incidents, initiate containment or escalation procedures, engage appropriate stakeholders, and maintain clear incident handoffs. Key Deliverables Security alerts, incidents, and ServiceNow requests resolved and documented within defined service‐level targets. Zscaler, email‐security, identity‐security, and Microsoft security‐platform … security risk, with identified control gaps, exceptions, and remediation actions documented and tracked. On‐call security events triaged, documented, and escalated within established response targets. Required Experience Five or more years of progressive experience in information security, security operations, incident response, or a related discipline. Hands ...

spot instances, and down-scaling policies to eliminate waste, while providing full visibility into the unit economics of training and serving LLM models. Observability & Incident Response: Establish 24/7 incident response, telemetry, and observability metrics to monitor system performance, model drift, and data pipelines. Data ...

actively participates in supporting/governing forums Contribute to the analysis and mitigation of data protection risks Monitors information security incidents, contributing to incident response and root cause analysis. Will own resulting actions as required where they relate to required changes in IT Security and Information Risk Management … policy and controls Security operations and incident response, liaison with internal teams and 3rd party suppliers To thrive in this role, you need to have A track record of delivering security solutions for large-scale infrastructure, transformation or integration programmes Practical knowledge and understanding of industry security frameworks ...

across multiple teams.* Mentor colleagues and contribute to the development of cybersecurity awareness and capability across the organization.* Provide leadership and coordination for cybersecurity incident response activities and major security events.Lead and oversee vulnerability management processes, including prioritization, remediation governance, and risk reporting. **Role Requirement*** Demonstrable experience … Qualys, Tenable, Rapid7, or equivalent platforms.* Knowledge of cloud security posture management and cloud security best practices.* Familiarity with threat intelligence, threat detection, and incident response processes.* Ability to balance technical security requirements with business priorities.* Experience managing and delivering cybersecurity projects or programs* Strong analytical and problem ...

auditability. Collect and maintain audit-ready evidence; support internal and external audits, control assessments, security reviews, customer requirements, and remediation plans. Participate in incident response, containment, recovery, root-cause analysis, and corrective actions for infrastructure and endpoint security events. Manage technical risks and policy exceptions transparently, including compensating … Entra ID or equivalent identity platforms. Practical experience implementing system and endpoint hardening, configuration baselines, patch management, vulnerability remediation, encryption, endpoint detection and response, and least-privilege controls. Experience supporting security or compliance programs and producing evidence for audits, assessments, or customer and regulatory requirements. Strong networking knowledge, including ...

architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have … risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing ...

Develop security policies, procedures, and automation frameworks. Communicate regularly with client IT teams to provide guidance and ensure operational readiness. Support the development of incident response processes and documentation. Advance security standard operating procedures and incident response reporting. Mentor developing team members. What You’ll Bring … infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and Confluence) Email security, DLP, encryption, and vulnerability management ...