1 to 25 of 26 Incident Response Jobs in the South West

participation in the regional "Defend as One" model. The role combines governance, assurance and hands-on leadership of proactive and preventative tactics, threat intelligence, incident response, vulnerability management, strategy and cultural change to build cyber resilience across the Integrated Care System (ICS). Main duties … within large, complex or multi-organisation environments. They will possess deep technical and governance expertise across areas such as threat detection, vulnerability management and incident response, with the ability to translate complex technical risk into clear, articulate, actionable information for senior executives and boards with assurance and confidence. ...

major project by reviewing a large volume of applications and ensuring they meet security standards before deployment. Whilst there is some exposure to Cyber Incident Response activities, this is very much a hands-on security assessment role where you'll be expected to work independently and manage … management tools such as Qualys (or similar) to assess security risks. Support ongoing cybersecurity project delivery within a high-profile programme. Assist with Cyber Incident Response activities where required, including security monitoring and investigation. What we're looking for We're looking for someone ...

team within a leading international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing … Identity Defender for Cloud Apps Microsoft Intune Qualys AttackIQ XM Cyber We're Interested In Candidates with experience in: SOC Operations Security Monitoring Incident Response Threat Hunting Cyber Defence Vulnerability Management Security Operations Engineering You may currently be working as a: Senior SOC Analyst SOC Analyst Cyber Security ...

audience, showing trends over time, and structuring reports around the decisions the reader needs to make, not just the findings. Set the standard for incident response and detection readiness. Drive adoption of incident response practices across engagements, own the IR-to-vulnerability-management feedback loop ...

alerts within a live SOC environment. Analyse security incidents to determine scope, impact, and priority, ensuring appropriate escalation and response. Manage end-to-end incident response activities from detection through to resolution. Support the development and enhancement of SIEM use cases, detection rules, analytics, and playbooks. Conduct real … cloud environments, and enterprise IT infrastructure. Experience creating and tuning detection use cases, analytics, and playbooks. Knowledge of Information Security principles, threat detection, and incident response practices. Familiarity with Microsoft technologies, Linux systems, and security tooling. Understanding of security frameworks and data protection principles including GDPR ...

cybersecurity who wants to develop their career in a hands-on SOC position. You will be responsible for monitoring and analysing security alerts, supporting incident response activities and helping to protect critical systems against evolving cyber threats. The client is open on specific technology experience and is primarily … Ideally 1+ year of commercial cybersecurity or SOC experience Experience monitoring, analysing and responding to security alerts A basic understanding of SOC operations and incident response principles Knowledge of common cyber threats, attack vectors and malware types A good understanding of networks, operating systems and core security concepts ...

vulnerabilities, and malware attack vectors. What We Are Looking For: Experience: Ideally 1-2 years of experience in a similar SOC, security monitoring, or incident response role. Technical Knowledge: A solid grasp of computer networks, operating systems, and core cybersecurity principles. Security Tools: Good working knowledge of security … technologies such as firewalls (network/application), host intrusion prevention, and antivirus software. Mindset: A strong understanding of common attack vectors, malware types, and incident response fundamentals. Critical Requirements: Security Clearance: Due to the secure nature of the environment, candidates must hold active UK Government SC Clearance ...

testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting … requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling ...

strengthen the security posture of critical systems. This is a hands-on role for a LogRhythm specialist with strong experience in security monitoring, incident response, and deep-dive analysis within secure environments. What you’ll be doing: Monitoring and analysing security events using LogRhythm Investigating and responding … alerts and incidents Producing detailed incident reports and root cause analysis Tuning and optimising detection rules and use cases Supporting LogRhythm administration (2nd-line level) Mentoring junior analysts and improving SOC processes What we’re looking for: Strong LogRhythm experience (Client & Web Console) Proven SOC/incident response ...

ensure data protection and business continuity] Ability to implement robust monitoring and logging solutions e.g., CloudWatch, to ensure system reliability, observability, and proactive incident response Comfortable working in Agile development teams, translating business requirements into technical solutions, and actively participating in sprint planning, retrospectives, and daily stand ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

Defence Ltd (CND). This is a key hire within our MSSP Security Operations Centre, offering the opportunity to take a lead role in incident analysis, client engagement, and mentoring junior analysts, while shaping how the SOC continues to evolve. The Role As a Senior Cyber Security Analyst … contributing to reporting and continuous improvement within the SOC. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency ...

compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed a security-aware culture.* Manage security incident response planning and coordinate with Security Operations Centre (SOC).* Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP).* Excellent communication skills, able to convey complex security topics to non-technical stakeholders.* Pragmatic, calm, and resilient under pressure during incident management.**Why Join Us?** Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies ...

. Define and govern DevOps, platform engineering and observability standards, including CI/CD pipelines, infrastructure-as-code, containerisation (Docker, Kubernetes), monitoring, alerting and incident response architecture. People, Community & Governance Mentor and develop the architecture community within GPTI and the wider ST&S portfolio, coaching junior architects, technical ...

availability, performance, security and resilience of production systems. Working in a small, collaborative team, you’ll take ownership of day-to-day platform operations, incident response and continuous improvement, while partnering closely with development teams to deliver reliable and scalable services. Key Responsibilities Administer and maintain Linux (Ubuntu ...

improve CI/CD pipelines and automation. Implement observability solutions using Prometheus, Grafana and OpenTelemetry. Support reliability engineering initiatives including SLOs, SLIs and incident response improvements. Collaborate with architects, security teams and software engineers to resolve complex technical challenges. Contribute to engineering standards, best practises and platform evolution. ...

around 25 through a period of genuine transformation. What you'll be doing: Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scale Build and govern an internationalised … manage the Technology Resilience framework, including business impact analysis, Disaster Recovery exercises (cyber-attack, ransomware, infrastructure failure scenarios) and Business Continuity Plans Lead major incident response and postmortem/root cause processes, driving a culture that reduces repeat incidents and strengthens proactive problem management Own the Change Advisory ...

Around 1+ year's commercial experience within cyber security or a SOC environment Good understanding of networking, operating systems and security fundamentals Exposure to incident response and security monitoring Experience with any SIEM platform (Microsoft Sentinel, Splunk, Microsoft Defender, QRadar, Elastic etc.) Strong communication skills What ...

design, implementation and management of cyber security controls and assessment functions.* Provide technical leadership across security engineering, cyber defence, security assurance and incident management activities.* Lead the continual improvement of security controls, assessment methodologies and cyber resilience capabilities.* Influence technical decision-making across infrastructure and security teams, ensuring solutions … technologies or disciplines, including PAM, ADFS, Firewalls, Entra, SIEM, EDR/XDR, CTEM, WAF/DDoS, PKI, SASE, IDS/IPS, security assurance frameworks, incident response or cryptographic systems.* Advanced experience assessing security controls, security posture and prioritising risk-based improvements.* Advanced skills in designing, engineering and managing ...

compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO/IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. Represent Ecctis in external audits and compliance reviews. Development Set the strategic direction ...

servers, storage, and cloud platforms and related services, ensuring these are resilient and efficient. Leading cybersecurity initiatives including conducting risk assessments, vulnerability management, and incident response. Establishing, maintaining and continuously improving IT governance frameworks, including policies, processes, standards and controls that support secure and effective service delivery. Managing audits ...

assessments and recommended actions Communicating findings to clients in a way that's accessible and easy to understand, even for non-technical stakeholders Supporting incident response activities and handling procedures Continuously building your knowledge of security tools, techniques and emerging trends Key skills and experience needed: Experience with ...

assets. Contribute to IT projects, including planning, testing, and quality assurance activities. Assist in preparing systems for stability and resilience, including BCP and Incident response techniques. Essential skills, characteristics and experience Basic understanding of IT support principles and troubleshooting techniques Highly effective written and verbal communication skills Willingness ...

legal sector, producing court-admissible analysis to ISO 17025 and ACPO/FSR standards. This is an evidential DF role rather than incident response. The right candidate has handled real casework end to end across mobile and computer, can defend their methodology under scrutiny, and is comfortable writing reports ...

role spans cloud infrastructure, software engineering, and operations to drive automation, observability, and reliability across the development lifecycle. You will strengthen platform reliability, improve incident response, and embed SRE practices. #J-18808-Ljbffr ...