10 of 10 Incident Response Jobs in Reading

cloud environment. This is not a traditional SOC role focused on alert handling . The position sits at the senior technical level and combines incident leadership, detection engineering, threat hunting and automation. You’ll have genuine ownership of security operations maturity rather than working in a ticket-driven environment. … senior technical point of escalation within the SOC, leading complex investigations and driving continuous improvement across tooling, detection capability and response processes. Typical responsibilities include: Leading complex security incidents end-to-end including investigation, containment, forensics and root cause analysis. Designing, tuning and improving detection across SIEM ...

Managed Service Provider (MSP) to recruit a Security Analyst based in Reading. The successful candidate will play a key role in security operations, incident response, threat detection and automation, helping to protect customer environments while continuously improving security platforms and processes. Key Responsibilities Manage the full security incident ...

with DevOps and project teams. Build and maintain Infrastructure as Code solutions, dynamic documentation and network architecture standards. Implement network monitoring, performance optimisation and incident response to ensure highly available services. Strengthen network security through access controls, encryption, security reviews and collaboration with IT teams. Partner with internal ...

platform and service design from the outset Lead key SRE practices such as reliability reviews, operational readiness, and toil reduction Drive automation across monitoring, incident response, and remediation Act as the technical escalation point for major incidents and high-risk releases Lead blameless post-incident reviews ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

platform optimisation Designing and implementing endpoint security controls Integrating CrowdStrike with technologies including Active Directory, ServiceNow, SIEM and SOAR platforms Developing detection rules, response workflows and security policies Supporting threat hunting and improving endpoint visibility Working across Windows server, desktop and cloud workloads Providing technical expertise throughout implementation … experience with: Enterprise deployment of CrowdStrike Falcon Falcon sensor rollout and lifecycle management Policy creation and tuning Host groups, prevention policies and detection management Incident response and threat hunting using CrowdStrike Falcon Complete, Falcon Insight or Falcon Prevent Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms ...

Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational resilience and cyber maturity. Acting as the senior lead … experience in a senior cyber security leadership role within a large and complex organisation. Strong technical background covering cyber operations, SOC, SIEM, threat intelligence, incident response, penetration testing and red teaming. Extensive experience leading cyber incidents and crisis management activities across enterprise environments and supply chains. Strong understanding ...

needed in various professional settings. What You’ll Need: Strong technical knowledge of the Falcon Platform and broader security landscape Solid understanding of incident response, malware analysis, forensics, or security analytics Excellent communication and interpersonal skills Resilience and resourcefulness in problem‐solving Ability to work independently and adapt ...

growth and evolving access requirements. Provide hands-on architectural guidance to engineering and operations teams during design, build, and deployment phases. Participate in incident response and problem resolution related to architecture-level IAM-related incidents, such as unauthorised access or compromised credentials, ensuring root causes are addressed ...

enhance decision‐making, streamline workflows and processes, improve efficiency and drive business outcomes. Technical Knowledge Advanced understanding of cyber security, threat detection and incident response. Familiarity with attack frameworks, exploitation techniques and threat actors. Knowledge of security tools, MITRE ATT&CK and industry best practices. Preferred Qualifications Security certifications ...