76 to 100 of 239 Incident Response Jobs in the South East

Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud ...

Professional Services role within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A … Working directly with customers, you will define detection strategies, design use cases aligned to MITRE ATT&CK, and guide improvements in visibility, coverage and response maturity. You will work closely with platform onboarding and engineering teams, supplementing them with specialist expertise in detection engineering and automation, rather than focusing ...

world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections … including use case design, ruleset development and coverage assessment Log source mapping and normalisation to support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response ...

Microsoft Azure, RHEL and Java/Spring Boot microservices. You’ll support business-critical platforms in a 24/7 environment, taking ownership of incident management, security remediation, CI/CD and automation. The Opportunity As TechOps Engineer, you’ll be responsible for the reliability, security and performance … infrastructure, applications and middleware while driving root-cause analysis and permanent resolutions. This is a highly technical role requiring strong production operations experience, confident incident leadership and the ability to improve platform reliability through automation and effective CI/CD practices. Key Responsibilities You’ll play a key role ...

resolve security incidents and infrastructure issues. Support backup, disaster recovery and business continuity processes. Participate in infrastructure projects, migrations and technology upgrades. Contribute to incident response activities and continuous security improvement. Requirements Experience 3+ years' experience in infrastructure, cybersecurity, DevSecOps or a similar role. Experience securing cloud platforms ...

security experience who can design, configure and improve security solutions across a complex environment. While the candidate should be familiar with security monitoring and incident handling, this role is not suited to someone whose experience is limited to those areas. The successful candidate will be able to understand complex … leading a small team), work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response. Key Responsibilities Must Have Extensive ...

operation and continuous improvement of EMBL-EBIs cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting EMBL … Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance and Privileged Access Management. Knowledge of cyber security frameworks and implementing and maintaining effective security controls. Experience ...

leaders (directors, managers and senior ICs), building high-performing teams with clear ownership and strong engineering culture Own platform reliability, resilience, and operational excellence: incident management, on-call standards, SLIs/SLOs, post-incident learning, and continuous improvement Partner with product engineering and threat research leaders to improve … focused environment Strong track record of building reliable, secure platforms and improving developer productivity through pragmatic, outcome-driven investment Experience establishing operational excellence practices (incident response, on-call, observability, SLOs, post-incident learning) and driving continuous improvement Ability to set strategy and translate it into execution ...

leaders (directors, managers and senior ICs), building high-performing teams with clear ownership and strong engineering culture Own platform reliability, resilience, and operational excellence: incident management, on-call standards, SLIs/SLOs, post-incident learning, and continuous improvement Partner with product engineering and threat research leaders to improve … focused environment Strong track record of building reliable, secure platforms and improving developer productivity through pragmatic, outcome-driven investment Experience establishing operational excellence practices (incident response, on-call, observability, SLOs, post-incident learning) and driving continuous improvement Ability to set strategy and translate it into execution ...

associated with Thales' IS/IT networks, systems and applications, as per Customer (primarily HMG UK MOD) and Thales Group policy and mandatory requirements. Incident Response: Be responsible for the reporting, investigation and analysis of security incidents and potential breaches within classified environments, working with the Thales … Incident management team to ensure identified issues are resolved quickly. IS/IT Squad Engagement: Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing IS/IT Squad activities, initiatives ...

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement. You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor ...

tools (e.g., Prometheus, Grafana, ELK stack, Cloudwatch). Excellent problem-solving skills and the ability to troubleshoot complex issues in distributed systems. Experience of Incident management and blameless postmortems that includes driving the incident response efforts during outages and other critical incidents, resolution, and communication ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Plan and manage the rota that keeps support cover … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to let a process run Experience managing SLAs, service reporting and stakeholder relationships ...

technologies and business initiatives, as well as participate in Change Advisory Board (CAB) meetings to provide security assuranceSupport the implementation, delivery, and exercising of incident and business continuity response plans, and contribute to the lessons identified processAct as a member of the incident response team … Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience ...

standards, governance and technical assurance processes. - Leading engineering strategy, roadmaps and service modernisation initiatives. - Owning platform reliability, operational resilience and service performance. - Leading major incident response and supporting critical 24/7 services. - Managing technical risks, dependencies and architectural decisions. - Coordinating delivery across engineering, development, operations and supplier … containerised platforms. - Linux administration. - Platform engineering and infrastructure ownership. - Technical governance, assurance and engineering standards. - Live service management and 24/7 operational support. - Incident, change and problem management. - Leadership of engineering and cross-functional teams. - Major incident management experience. - Experience supporting secure, business-critical services. - GitLab, PostgreSQL ...

real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection … MITRE ATT&CK, including use case design, ruleset development and coverage assessmentLog source mapping and normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

desirable extras include certifications such as GWAPT, GWEB, OSCP or AWS Security Specialty, Security Champions or developer training experience, and exposure to SOC or Incident Response environments. What's in it for you? Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment ...

security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability management and incident response. Secure software development and DevSecOps practices. ICT service management approaches including ITIL. Additional Requirements Must be eligible and willing to obtain UK Government ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

assure SOC investigations, confirming findings are accurate, evidence-based and clearly documented. Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst. Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations … incidents. Coordinate with Incident Responders during cyber security incidents, clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence. Collaborate with SOC Engineers to improve monitoring coverage, alert quality and operational effectiveness. Support the onboarding of new systems, applicationsand cloud services into SOC monitoringby validating monitoring content ...

assure SOC investigations, confirming findings are accurate, evidence-based and clearly documented. Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst. Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations … incidents. Coordinate with Incident Responders during cyber security incidents, clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence. Collaborate with SOC Engineers to improve monitoring coverage, alert quality and operational effectiveness. Support the onboarding of new systems, applicationsand cloud services into SOC monitoringby validating monitoring content ...

other passenger-facing devices that are critical to daily service delivery.You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology.Key ResponsibilitiesLead the end-to-end support and operation of front office systems and field … point for major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms, coordinating rapid resolution with engineering and field teams.Drive operational excellence across:Incident managementTicket prioritisation and queue managementRoot cause analysis (RCA)Service performance and uptimeWork closely with field engineers, maintenance teams, and operational stakeholders to ensure effective ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key ResponsibilitiesLead the end-to-end support and operation of front office systems … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms, coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident managementTicket prioritisation and queue managementRoot cause analysis (RCA)Service performance and uptimeWork closely with field engineers, maintenance teams, and operational stakeholders to ensure effective resolution ...