26 to 50 of 53 Incident Response Jobs in Portsmouth

from you. 🔐 What You’ll Be Doing Monitor & Detect: Identify and respond to security alerts from SIEM, IDS/IPS, EDR, and other tools. Incident Response: Investigate threats and escalate incidents, ensuring rapid containment and resolution. Threat Hunting: Proactively search for hidden threats and conduct forensic investigations. Lead … Lead investigations and support sensitive case handling. 🛠 What You Bring to the Role Must-Have Experience: Strong background in cyber security, protective monitoring, and incident response. Proficient in SIEM tools (e.g. LogRhythm, Splunk) and IDS systems (e.g. Snort). In-depth knowledge of network and host security. Skilled in More ❯

risk with quantifiable results. We’re comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley Insurance, we’ve been at … the forefront of cyber insurance management and breach response activities for business clients in the US, UK, and Europe since 2017. As Beazley Security, the company will have an expanded scope, leveraging nearly two decades of cyber incident experience, a strong services division, and a business strategy focused More ❯

experience with a broad range of cybersecurity tools. Key Responsibilities: Working closely with the SOC to implement SIEM technology Automating security workflows to streamline incident response Utilising cloud environments across both Azure and AWS. Assisting with Incident Management Contributing to platform automation and DevOps practices. Utilising XQL More ❯

Inko Nito and Etaru. What you will do: Lead our global cybersecurity strategy , aligning with PCI DSS, GDPR, ISO27001, and evolving regulatory requirements. Own incident response and risk mitigation , overseeing system security across POS, Azure, networks, and customer data platforms. Collaborate cross-functionally with IT, legal, finance, and More ❯

maintain standard operating procedures and protocols. Collaborate closely with the Cyber Defence team to uphold enterprise defence practices, guidelines, and procedures. Provide support for incident response efforts as needed. Assist with operational and management reporting produced by the team. Skills/Qualifications A highly self-motivated individual with More ❯

with vendors and external support teams as needed. Working flexibly, outside of core hours and as part of a support rota as required Providing incident response, business continuity and disaster recovery support as part of the on-call rota. Working as needed to provide proactive maintenance at dates More ❯

secure-by-default Terraform for cloud deployments Solid understanding of cloud and application security principles Knowledge of network protocols, vulnerability management, and creation of Incident Response programs Willingness to learn and adapt to new security challenges and technologies Relevant certifications such as AWS Certified Security, GIAC GC*, ISC2 More ❯

breaches, ROPAs, and DPIAs, while delivering scalable training and awareness across the company. Design and implement secure, low-overhead technical and organisational controls, overseeing incident response, vendor security, and external certifications. Drive compliance automation initiatives to minimise manual processes and support scalable growth, conducting internal audits and monitoring More ❯

development, including KQL, analytics rules, and custom data connectors Scripting and engineering skills – Python, PowerShell, APIs, Function Apps A background in cyber threat detection, incident response or DFIR is a real plus Comfortable working in very fast-moving, customer facing delivery environments The Technical Shizzle: Microsoft Sentinel (KQL More ❯

delivery lifecycle 🛠️ Feeding into control design activities—DevSecOps, threat modelling, workshops, and design reviews 🧪 Managing and coordinating penetration testing and remediation efforts 🚨 Leading security incident response for the programme, from detection to resolution 🎓 Running tailored security awareness training for teams 🔒 Maintaining continuous oversight of emerging threats, vulnerabilities, and More ❯

and Windows (on-premise Active Directory) Security monitoring, SIEM tooling such as Exabeam, QRadar, Splunk,k, and Sentinel. Senior experience with security management and incident response across SOC, Malware Ransomware, Threat/Analytics, Server, and Endpoint security Strong experience in programming/scripting languages such as: Powershell (preferred More ❯

maintain the Company’s competitive edge. Guiding the creation and maintenance of advanced tools and scripts for real-time detection, threat analysis, and rapid incident response. Championing the adoption of cutting-edge security standards and practices, ensuring our mobile platforms meet both internal and industry regulatory requirements. By applying More ❯

a secure environment. Provide input into processes, documentation, and security best practices. What We’re Looking For: Proven hands-on experience in SOC operations, incident response, and technical investigations . Strong familiarity with Microsoft security tools (Defender, Sentinel, etc.). Experience reviewing security questionnaires and identifying risk in More ❯

as code (Terraform, etc.), and CI/CD pipelines to reduce toil and accelerate deployment frequency. Build observability into everything—own monitoring, alerting, and incident response to minimize MTTR and improve system health. Champion SRE culture and reliability-focused engineering—help shape sustainable engineering practices, SLAs, SLOs, and More ❯

Collaborate with developers and traders to optimise infrastructure, troubleshoot issues, and deploy production-ready tooling Write automation and internal tools for deployment, monitoring, and incident response Tune performance across OS, network, and cloud layers — this role is hands-on and detail-oriented Improve system resilience, observability, and security More ❯

focus on scalability, maintainability, and operational simplicity. Support secure identity and access solutions using Keycloak, and scalable routing with Traefik in containerized environments. Lead incident response and root cause analysis, ensuring learnings feed back into IaC practices. You Have BS in Computer Science, Engineering, or a related field More ❯

and operate a Kubernetes based microservices stack using Infrastructure as Code GitOps and modern security practices Set and maintain platform reliability goals including SLOs incident response and continuous compliance Design flexible deployment models for on prem and edge use without fragmenting the codebase Partner closely with systems engineers More ❯

Ensure alignment between engineering work and commercial objectives. Technical Oversight Contribute to system architecture and technical strategy alongside senior engineers and the CTO. Support incident response and postmortems. Stay close to the codebase and remain hands-on where needed (though this is primarily a management role). Key More ❯

to containerisation and compute cost optimisation - Coach and support team members on cloud-native development principles - Take part in shared on-call rotations and incident response improvements What We’re Looking For: - Solid experience across Fullstack Engineering - Demonstrated AWS infrastructure ownership (especially ECS, EC2, S3, Lambda) - Infrastructure-as More ❯

build tools and automation to support deployment, monitoring, and scaling Collaborate with product and engineering teams to ensure infrastructure supports business goals Improve observability, incident response, and system reliability Help shape our cloud strategy, ideally with experience in AWS account and resource management Requirements: 5+ years of experience More ❯

AWS, Kubernetes, Postgres, and Terraform. Bonus Skills: Background in intelligence collection or big data. Familiarity with functional programming and high-throughput systems. Experience with incident response (though this role is not on-call). Benefits & Perks Flexible Work: Hybrid setup Learning & Development: $1,000 annual budget and LinkedIn More ❯

least you'll be able to read code and have some level of scripting knowledge. You'll also be familiar with security monitoring and incident response best practices. Also great if you have security certifications Salary Up to £90,000 depending on experience, with 35 days holidays, private More ❯

maintain the Company’s competitive edge. Guiding the creation and maintenance of advanced tools and scripts for real-time detection, threat analysis, and rapid incident response. By applying to us you are agreeing to share your Personal Data in accordance with our Recruitment Privacy Policy which can be found More ❯

driven products and massive data workloads. Drive best practices in infrastructure automation, DevOps, MLOps, continuous integration/continuous deployment (CI/CD), monitoring, and incident response. Collaborate closely with software engineers, data scientists, and product teams to understand infrastructure requirements and proactively solve platform-related challenges. Ensure platform security … compliance, disaster recovery planning, and business continuity. Manage platform reliability, uptime, observability, and incident response processes. Provide technical leadership, mentorship, and guidance to engineers within your team. If you're looking for a venture with high impact and rapid growth with remote flexibility, please apply More ❯

and standards. Design and implement systems to monitor product reliability, with emphasis on agents and the desktop application Partner with the CTO to lead incident response and troubleshooting efforts. Collaborate cross-functionally to manage the full R&D lifecycle—from concept to launch—helping shape the roadmap and More ❯