1 to 25 of 35 Remote/Hybrid Incident Response Jobs in the South East

improvement Lead security engagement within client Design Authority and Enterprise Architecture forums Manage integration with the client SOC, including security reporting, SIEM alignment, and incident response coordination Oversee security incident management in line with the client Cyber Security Incident Response Plan Own joiner/mover … Strong understanding of NCSC HMG IAS5, Cyber Assessment Framework (CAF), ISO 27001, and GDPR Hands-on experience integrating with a UK Government SOC, including incident response and security reporting Strong working knowledge of Oracle Cloud security (OCI IAM, Vault, network security, audit, PAM) Experience securing Oracle SaaS applications ...

intersection of cyber leadership, risk governance, and business engagement . This is a people-focused leadership role , managing a capable, self-sufficient team across incident response, engineering, and architecture-while acting as a key deputy to the CISO (EMEA). Key Responsibilities Lead and manage cyber teams across … incident response, engineering, and architecture Act as deputy to CISO , supporting risk, governance, and leadership forums Oversee incident response , providing executive-level updates Ensure security controls and architecture align to CISO strategy and risk appetite Manage senior stakeholders (CIO, COO, CFO) and translate risk into business ...

frameworks such as NIST CSF, IEC 62443 and other recognised industry standards. Assess critical network infrastructure, including segmentation, remote access, identity, monitoring, resilience and incident response capabilities. Review OT architecture, asset inventories, data flows, firewall rules, network zones and conduits. Identify security gaps, operational risks, vulnerabilities and control … senior business stakeholders. Produce high-quality client deliverables, including assessment reports, risk registers, maturity scorecards, architecture recommendations and implementation roadmaps. Contribute to OT incident response planning, tabletop exercises, cyber resilience testing and recovery planning. Support pre-sales activity, including solution shaping, proposal input and client presentations where required. ...

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, support monitoring and incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security … ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

that everything else runs on. You'll work across the full platform lifecycle—from infrastructure design and provisioning through to CI/CD, observability, incident response and cost optimisation. The role suits someone who pairs strong infrastructure-as-code discipline with a genuine automation-first mindset … Pulumi, CloudFormation or equivalent) and the workflows around it Operate Kubernetes clusters and supporting platform services Implement observability—metrics, logs, traces, dashboards, alerting Lead incident response, root-cause analysis and reliability improvements Drive cloud cost optimisation and capacity planning Implement security hardening, secret management and compliance controls Partner ...

strategies and executive-level summaries. What you’ll bring : Essential Criteria Extensive prior experience in threat hunting at a large enterprise environment. Experience with incident response, SOC, or detection engineering. Deep understanding of the MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies … offensive security methodologies, including common exploit chains, reverse engineering basics, or penetration testing techniques. Relevant industry certifications demonstrating specialised knowledge in threat hunting, incident response, or forensics (e.g., SANS GCIA, GCIH, GCFA, OSCP). Benefits and perks There's one thing people can't stop talking about when ...

improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response (IR) Team to develop risk mitigation strategies. ...

documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Work in collaboration with CSC DEx in other Natcos (International Group Companies France, Italy, Germany, Spain etc) Skillset/… functions and operating models. Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering Awareness of Incident response processes. Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs ...

Cyber Essentials) Experience overseeing governance, risk, and assurance activities Broad technical understanding across networks, cloud, infrastructure Hands-on experience leading or coordinating cyber incident response Ability to translate technical risk into clear, business-focused messaging Experience producing reports, dashboards, and presenting to senior stakeholders Strong people leadership skills … System (ISMS) Ensure alignment with standards such as ISO 27001 and Cyber Essentials Identify, assess, and mitigate cyber risks, maintaining the risk register Lead incident response capability, ensuring plans are tested and effective Monitor the threat landscape and advise on emerging risks and mitigations Manage and develop ...

security risk Design and implement security mitigations and remediation strategies Monitor emerging cyber threats and recommend appropriate defensive measures Support automated threat monitoring, incident detection and response capabilities Develop and maintain cybersecurity playbooks and incident response procedures Coordinate with third-party security providers during security incidents … Defender, Splunk, SolarWinds, Kubernetes, PowerShell, Python, Azure, AWS, Windows Server, Linux, New Relic, HashiCorp, Zerto and Jira. Experience with AI-driven threat detection and response platforms would also be advantageous. Qualifications CISSP certification preferred Equivalent certifications such as CISM, CEH or GIAC also considered Relevant cybersecurity or information security ...

mitigation activities Oversee security architecture to ensure alignment with wider technology strategy Drive continuous improvement through security assessments, testing, and reporting Ensure effective incident detection, response, and recovery capabilities Lead vulnerability management and remediation across all technology environments Oversee third-party security testing, including penetration testing and phishing … delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical ...

vulnerability management — focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms • Supporting incident response and triage of alerts requiring business context • Influencing engineering, product, and senior stakeholders on security direction What We're Looking ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...

cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials) overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plans risk management and compliance, ensuring compliance with various standards and frameworks About you Applicants for the Cyber Security Engineer role will ...

cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials) overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plans risk management and compliance, ensuring compliance with various standards and frameworks About you Applicants for the Cyber Security Engineer role will ...

issues Maintain and configure observability platforms such as Datadog Proactively monitor production and other environments to ensure stability, availability, security and integrity Participate in incident response, troubleshooting, and root cause analysis to mitigate and prevent future issues Work closely with engineering, support and operations teams to upskill ...

skills develop. The core focus of the role is AWS-hosted environment security, complemented by identity and access management, vulnerability management, compliance support and incident response. You will work closely with their Engineering, Platform, Infrastructure and Support teams, as well as external stakeholders. A starting salary of around ...

Platform, Fabric) Drive Infrastructure as Code and automation (Azure/Terraform/Bicep) Improve release, deployment, and environment management Own monitoring, logging, alerting, and incident response Support secure access and identity (Entra ID) Work with engineering teams to take solutions into live production Champion DevOps culture and continuous … Hands-on CI/CD with Azure DevOps and/or GitHub Infrastructure as Code experience (Terraform or Bicep) Experience supporting production systems and incident management Understanding of cloud security and governance Strong communication and stakeholder skills This is a fully remote role with an excellent opportunity to build ...

frameworks, and risk management processes. Develop and maintain the Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus ...

deliver high-quality solutions. Improve system performance, reliability, observability, and security. Contribute to architectural decisions and technical strategy. Troubleshoot production issues and participate in incident response when required. Work with cloud infrastructure, databases, and CI/CD pipelines. Review code, mentor teammates, and promote engineering best practices. Profile ...

decisions through credibility, judgement and impact. Strong delivery mindset with the ability to manage multiple complex initiatives simultaneously, demonstrating consistent outcomes across risk management, incident response, assurance and security improvement programmes. Advanced capability in the safe and responsible use of AI and emerging technologies, including enterprise ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...