1 to 25 of 42 Remote/Hybrid Incident Response Jobs in the South East

risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems … vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats and recommend appropriate defensive measures Enhance threat detection, monitoring and incident response capabilities Develop and maintain incident response playbooks and operational procedures Work closely with third-party security providers during incidents and security ...

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, supportmonitoringand incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement … whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

excellent opportunity for someone with 2-4 years' hands-on security experience to take the next step in their career, working across threat detection, incident response, and security operations in a collaborative, fast-paced environment. Key Responsibilities Monitor security alerts and investigate potential threats using SIEM tooling Support … incident response activities, from initial triage through to resolution and reporting Conduct vulnerability assessments and coordinate remediation with technical teams Assist with security control reviews and audits against frameworks such as ISO 27001, NIST CSF, and Cyber Essentials Contribute to the development and improvement of security policies ...

work will include proactive security monitoring across our hybrid cloud and on premises environment, triaging and investigating alerts, and supporting coordinated incident response activities. You will operate our vulnerability management processes, translate threat intelligence into actionable defences, and contribute to the improvement of detection content and security controls. … contribute to several high impact initiatives including: Establishing a more mature, risk based vulnerability management lifecycle and reducing exposure windows across critical systems Enhancing incident response readiness through improved playbooks, scenario testing, and lessons learned processes Uplifting monitoring coverage and the effectiveness of SIEM/EDR/ ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

cloud environment. This is not a traditional SOC role focused on alert handling . The position sits at the senior technical level and combines incident leadership, detection engineering, threat hunting and automation. You’ll have genuine ownership of security operations maturity rather than working in a ticket-driven environment. … senior technical point of escalation within the SOC, leading complex investigations and driving continuous improvement across tooling, detection capability and response processes. Typical responsibilities include: Leading complex security incidents end-to-end including investigation, containment, forensics and root cause analysis. Designing, tuning and improving detection across SIEM ...

respond to security incidents across a global environment. Monitor, tune and optimise security monitoring technologies, including SIEM and EDR platforms. Lead and coordinate incident response activities, ensuring issues are investigated through to resolution. Perform regular security assessments to identify vulnerabilities and support remediation efforts. Partner with cross-functional … business teams to improve security controls and processes. Act as a technical subject matter expert for security operations and incident response. Support the evaluation, validation and implementation of new security tools and technologies. Contribute to the development and continuous improvement of security policies, procedures and operational playbooks. Help ensure ...

cloud platforms and supplier-managed services. This is an excellent opportunity for an experienced cyber security professional who enjoys a blend of security operations, incident response, vulnerability management, security assurance and stakeholder engagement. You will play a key role in improving security controls, reducing organisational risk and enhancing … provide a proactive and consistent cyber security operations and assurance capability across the organisation. You will provide day-to-day security monitoring activities, support incident response processes, manage vulnerability remediation, and contribute to the ongoing development of security controls, policies and procedures. You will need Strong experience ...

improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response (IR) Team to develop risk mitigation strategies. ...

closely with our internal and external security operations teams, you will anticipate, assess and mitigate threats. The intelligence you provide will support strategic decisions, incident response and continuous improvements to our cyber resilience. This pivotal Cyber Security role requires strong technical expertise, intelligence capability and commercial awareness within … business insights. MITRE ATT&CK training/certification is essential . Experience developing Priority Intelligence Requirements (PIRs). Strong experience working closely with SOC, Incident Response, Vulnerability Management, Security Engineering and Risk. Experience managing the end-to-end intelligence lifecycle. Significant Cyber Threat Intelligence (CTI) or closely related ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

partnered with a growing cyber security business in Buckinghamshire, supporting customers with threat monitoring, incident response, and managed security services. They are looking for a Level 3 SOC Analyst to join their experienced SOC team, leading complex investigations and acting as the technical escalation point for major security … develop detection rules, automate workflows, and continuously improve SOC operations The ideal Level 3 SOC Analyst will have: Strong commercial experience within a SOC, incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM ...

petabyte scale — sharding and replication, materialised views, merge and query optimisation, tenant isolation and cost/performance trade-offs.Owning SLOs, observability, capacity planning and incident response for data-intensive systems and pipelines, alongside the orchestration and job execution that power them.Shaping Data-as-a-Service as a real … black box — and ideally have contributed code upstream.Reliability engineering for data platforms. You bring true SRE discipline — SLOs, observability, capacity planning and incident response — to analytical data systems and pipelines.Data-as-a-Service productisation. You think in terms of data as a product: secure, multi-tenant, immutable releases ...

principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud ...

Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud ...

Champion automated testing, observability, and production readiness across backend services Oversee database design, migrations, data integrity, and performance in partnership with platform teams Lead incident response, post-incident reviews, and continuous operational improvements Mentor engineers in PHP, Go, security, performance, and backend best practices Support high-risk … pragmatic approach to technical decision-making Expertise in automated testing, CI/CD, and safe release practices Strong understanding of observability, monitoring, and incident management Knowledge of security, compliance, and non-functional requirements in financial services Comfortable evolving both modern and legacy systems Hands-on leader who can contribute ...

sources against use cases to identify and close coverage gaps Designing use cases aligned to MITRE ATT&CK Building SOAR automations and automated response workflows Writing incident response playbooks for customers Owning the detection-as-code approach — pipelines, version control, deployment Running workshops, coverage assessments ...

Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and technical … within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong ...

practice. Practical experience in one or more security areas such as vulnerability management, Identity and Access Management, endpoint security, cloud security, security monitoring or incident response. The ability to understand technical issues, assess security risk and recommend practical and proportionate solutions. Strong analytical and problem-solving skills. Confidence working ...

need to succeed. Career development is a core focus, with clear pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response for those who want to specialise. You’ll be part of a collaborative, agile team that values curiosity, humour and a genuine ...

protection. Risk & Governance: Maintain risk registers, execute supplier security due diligence, manage exception workflows, and deliver targeted security awareness programmes across internal teams. Vulnerability & Incident Operations: Strengthen patching schedules, penetration test remediation, secure change management, backup validation, and incident response procedures. Cross-Functional Collaboration: Partner with engineering ...

that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security ...

networking related issues Maintain and configure observability platforms such as DatadogProactively monitor production and other environments to ensure stability, availability, security and integrityParticipate in incident response, troubleshooting, and root cause analysis to mitigate and prevent future issuesWork closely with engineering, support and operations teams to upskill and promote ...

cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials)overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plansrisk management and compliance, ensuring compliance with various standards and frameworksAbout youApplicants for the Cyber Security Engineer role will have:experience gained ...

CodeSupport container-based workloadsEnsure environments are consistent, scalable, and aligned with application needsObservability & ReliabilityImplement monitoring, logging, and alerting focused on system and application healthSupport incident response and debugging across the stackDrive ongoing improvements to reliability and performanceRequired ExperienceStrong experience in DevOps, Platform Engineering, or Software EngineeringGood programming experience ...