126 to 150 of 240 Incident Response Jobs in the South East

tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will be of particular interest: Experience contributing to incident response across a complex microservice-based application Application Security best practice including identifying potential threats and vulnerabilities in applications and cloud infrastructure, designing ...

shift-left strategies, security scanning & tooling.* Container Security – Experienced in Docker frameworks, CI/CD, Orchestration, Scanning and Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding ...

policies and risk management framework Conduct vendor and third-party security assessments as part of the procurement and onboarding process Contribute to Dexory's incident response and vulnerability management processes Monitor the threat landscape for risks relevant to an autonomous robotics and warehouse intelligence business Develop ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO and will ...

Information Security Analyst - SecOps Response position, you will document notes, analysis findings, containment steps, and cause for each security incident. The work Document notes, analysis findings, containment steps, and cause for each security incident Working details Work model: Hybrid Location: London, Cardiff Salary: Access to initiatives like Cycle … asking that you attend the office a minimum of 1 day per week , but it’s not essential 3+ years experience in a cyber incident response and digital forensics function You’ll need experience in cloud forensics (GCP, AWS) We have a Hybrid approach to working here ...

pragmatic, well-understood patterns over those who lean on theory, jargon, or unnecessary complexity. A platform you've built and kept running, or an incident you've resolved and can clearly explain, will count for far more than a stack of certifications. Core Responsibilities Provision, configure, and harden … example CloudWatch) across services and infrastructure Maintain data pipelines, backup, and lifecycle management for Aurora PostgreSQL and other AWS-native data tooling Platform Operations & Incident Response Act as first responder for infrastructure incidents, supporting root cause analysis and post-incident review Coordinate patching, upgrades, and lifecycle management ...

full time in the office) Salary: £50,000 - £60,000Role and responsibilities Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel … support compliance and mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft ...

client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments. Key Requirements: Proven commercial … such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar. Exposure to vulnerability management and working with technical teams to remediate findings. Comfortable supporting incident response activities, including triage, investigation and containment. Experience using SIEM and security monitoring tools for alert analysis and threat detection. Strong communication skills ...

/CD pipelines and drive adoption of GitOps practices Build self-service tooling that lets product teams ship without platform bottlenecks Improve observability, incident response and SLO tracking Lead infrastructure-as-code standards using Terraform Champion security and cost optimisation across the platform Essential Requirements 5+ years ...

across network and cloud environments. Manage and improve firewall, IDS/IPS, and vulnerability management solutions. Identify security weaknesses and drive remediation activities. Support incident response and security investigations. Improve infrastructure logging, monitoring, and threat detection capabilities. Partner with global teams to strengthen security standards and best practices. ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

Experience Experience preparing environments ahead of external penetration testing. Exposure to regulated, critical infrastructure or highly secure environments. Experience working alongside Security Operations or Incident Response teams. Microsoft or security certifications such as SC-200, SC-300, SC-400, AZ-500, CISSP or CCSP. Suitable Backgrounds This role ...

meet regulatory and business requirements. Identifying and mitigating cyber risks. Enabling secure cloud adoption and ensuring robust platform and integration security. Supporting governance, audits, incident response, resilience planning, and security assurance. Influencing senior stakeholders and helping organisations make informed security decisions. What You'll Bring: Proven experience leading ...

management. Putting AI or ML models into production, LLM features included. Infrastructure as code with Terraform, Ansible or similar, plus configuration management. Observability and incident response: metrics, logging, tracing. Message queues, event-driven architectures or data pipelines. Also Welcome Kubernetes. Deploying, running or debugging workloads, including K3s, RKE2 ...

security release plan. Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews. Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources ...

ready solutions and address architectural gaps using modern microservices and cloud-native patterns. Own production health for your services, contributing to on-call rotations, incident response, and post-incident reviews in a "you build it, you run it" environment. Identify, analyse, and resolve system availability, reliability ...

ready solutions and address architectural gaps using modern microservices and cloud-native patterns. Own production health for your services, contributing to on-call rotations, incident response, and post-incident reviews in a "you build it, you run it" environment. Identify, analyse, and resolve system availability, reliability ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

storage and processing that underpins data across the organisation. Principal Data Engineers are expected to lead the data lifecycle from development to deployment, monitoring, incident response, performance optimisation, and deprecation in line with modern DevOps principles. Leading agile teams and supported by senior engineers, this role involves building … support the secure and scalable delivery of data. Maintain and operate data products, ensuring their availability, performance, and resilience through monitoring, alerting, patching, and incident resolution. Assure code and automation scripts to manage data flows. Lead service reviews, health checks, and root cause analyses to improve data processing reliability ...

storage and processing that underpins data across the organisation. Principal Data Engineers are expected to lead the data lifecycle from development to deployment, monitoring, incident response, performance optimisation, and deprecation in line with modern DevOps principles. Leading agile teams and supported by senior engineers, this role involves building … support the secure and scalable delivery of data. Maintain and operate data products, ensuring their availability, performance, and resilience through monitoring, alerting, patching, and incident resolution. Assure code and automation scripts to manage data flows. Lead service reviews, health checks, and root cause analyses to improve data processing reliability ...

compliance, including role-based access controls, change management, audit readiness, data protection, and adherence to organisational policies and best practices Lead system support, incident resolution, and service delivery, acting as an escalation point for complex issues, coordinating with stakeholders, and ensuring system availability, performance, and service excellence Oversee integrations … align technology solutions with business objectives across complex, multi-site organisations Strong governance, security, and service management knowledge, including access controls, compliance, audit requirements, incident, change, and problem management, and adherence to regulatory standards such as GDPR and ISO 27001 Excellent stakeholder, vendor, and communication skills, able to influence ...

Develop and implement Group-wide IT & Cyber Security strategy Own security policies, governance frameworks and risk registers Lead cyber risk assessments, remediation and incident response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus … knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms Cyber security risk and incident management experience Excellent stakeholder and communication skills A commercially minded, proactive and solutions-focused approach Willingness to travel within Europe when required This ...

functional requirements and acceptance criteria for availability, recoverability, performance, security, accessibility and support. Ensure technical designs include suitable monitoring, alerting, backup, disaster recovery and incident response considerations. YOU ARE A MATCH IF... Education: A degree in Computer Science, Software Engineering or related discipline, or equivalent professional experience. Relevant … queues, API Management, Azure SQL, Cosmos DB, containers and monitoring services. Strong understanding of CI/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. ...

high-performing server, storage, and data centre environments. Owning disaster recovery, backup, and resilience capabilities, ensuring recovery objectives are achieved and regularly tested. Managing incident response, root cause analysis, capacity planning, and infrastructure service improvements. Driving infrastructure strategy, technology adoption, operational efficiency, and compliance with governance and cybersecurity ...