1 to 25 of 67 Incident Response Jobs in the South West

client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice. Senior Incident Response Investigator Location - Remote … attackers got in, then explaining what it means for the business in language senior leaders can act on. What you'll do Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance Maintain target utilisation on chargeable client projects Produce technical ...

Digital Forensics Investigator Digital Forensics | Cyber Investigations | Incident Response Are you passionate about uncovering digital evidence, investigating cyber incidents, and helping organisations understand what really happened during a security event? We're looking for a Digital Forensics Investigator to support complex cyber investigations, incident response activities … handling procedures. What You’ll Be Doing Conduct digital forensic investigations, collecting and analysing electronic evidence to support internal investigations, legal proceedings, and cybersecurity incident response. Identify, acquire, preserve, and analyse digital evidence across laptops, servers, mobile devices, cloud platforms, and enterprise environments. Investigate suspicious activity, unauthorised access, compromised ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

lead a team of highly capable cyber threat analysts protecting Northrop Grumman UK and EMEA operations, while remaining directly involved in threat hunting, incident response, digital forensics and cyber defence activities. Working as part of a global cybersecurity organisation, you will collaborate closely with colleagues across … direction, coaching and day-to-day operational oversight. Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage, investigation and response activities. Serve as Incident Response Lead for major cyber security events, coordinating technical investigations, containment and remediation activities. Lead advanced threat hunting ...

providing the infrastructure and expertise to make sure we can be there for our customers. Job overview: We have a new opportunity for an Incident Response Analyst to join our Security and Resilience function in our client. You'll respond to Cyber Security incidents performing forensic investigations … intelligence services. Key responsibilities: Acting as an escalation point for all UK security incidents, ensuring incidents are managed in accordance with UK and Group incident management requirements Performing in-depth analysis of security events utilising a range of security tools Supporting the wider team in process improvement, detection content ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

strong central security architecture capability. Embed security into enterprise architecture, solution design and procurement. Drive standardisation through reusable security controls and patterns. Oversee detection, response and recovery across IT and OT environments. Continuously improve incident response capability and organisational resilience. Align incident management with regulatory … ability to influence at the executive level and deliver integrated, enterprise-wide security capabilities. You will have proven leadership experience in security operations and incident response teams, and experience building and leading integrated security functions. A strong track record embedding security into business and technology delivery ...

activity by interpreting relevant standards and good practice frameworks, translating requirements into practical actions, and working with Technology Teams to support proportionate implementation. Security Incident Support: Support security incident response by helping assess governance, risk and compliance impacts, coordinating evidence, supporting root cause analysis and ensuring lessons … improvement. Essential Good understanding of information technology security, information security risk and control management. Experience supporting, coordinating or assuring IT security controls, vulnerability management, incident response, IT disaster recovery or IT change governance, ideally while working alongside technical teams who own implementation. Awareness of recognised security standards ...

Defining, implementing, and maintaining corporate security policies, standards, and procedures to ensure compliance with industry regulations, legal requirements (e.g., GDPR, HIPAA), and best practices. Incident Response and Management: Playing a key role in developing incident response plans and coordinating efforts to detect, analyse, and respond ...

automated controls. Work closely with development squads to support onboarding, platform adoption and day-to-day usage of the central platform. Contribute to incident response, root-cause analysis and continuous improvement of platform reliability and support quality. Share knowledge, document standards and help establish the central SRE Platform … Strong understanding of observability, including metrics, logs, traces and operational insights. Experience integrating security, governance and compliance into technical solutions. Experience supporting production environments, incident response and continuous service improvement. Good understanding of modern software delivery practices and engineering automation. Excellent analytical, troubleshooting and communication skills. Advantageous ...

simulation and training systems, as well as existing deployment and virtualisation tools. Apply SRE practices to improve system reliability, including observability (metrics, logs, tracing), incident response, and root cause analysis. What We Are Looking For: This is not a pure cloud or greenfield platform role. You will … infrastructure. Experience in developing with Go or Python as well as shell scripting. Experience applying Site Reliability Engineering (SRE) practices such as monitoring, alerting, incident response, and service reliability improvement. At Skyral, we are committed to fostering a culture of diversity, equality and inclusion. We also ensure that ...

Unknown is seeking a Digital Forensics Investigator to support complex cyber investigations, incident response activities, and evidence-led enquiries. You will work across endpoints, cloud environments, mobile devices, and enterprise security platforms, applying forensic techniques to identify, preserve, analyse, and present digital evidence. You will collaborate with internal ...

ownership Owning end-to-end engineering delivery against the data product roadmap: pipelines that are idempotent, tested, observable, and documented Running production operations - monitoring, incident response, root-cause analysis, and ensuring issues are resolved with clear ownership and learning Defining and enforcing engineering standards across the team: coding … delivering and operating production data platforms and pipelines at scale Experience defining and enforcing engineering standards across a team Strong operational mindset: reliability, monitoring, incident response, cost management Hands-on with modern cloud data platforms (e.g. Snowflake, BigQuery, Redshift) Experience with orchestration tools (e.g. Airflow, Dagster), CI/ ...

Incident & Problem Analyst coordinates incident response and drives problem management across HL's enterprise technology estate, ensuring rapid service restoration, reduced repeat failure, and improved operational resilience. Operating within Service Assurance, the role provides run-time control and governance across heritage, cloud, and third-party services, working … root cause insight, known errors, and permanent fixes while protecting service stability and client outcomes. What you will be doing Coordinate end-to-end incident management, including Major Incidents, ensuring rapid service restoration, clear communications, and accurate record keeping. Act as a Service Assurance control point during live incidents ...

projects, migrations and technology refresh programmes. Manage the security of the infrastructure through appropriate change, configuration and release-management processes. Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness. PERSON SPECIFICATION (essential requirements) Qualifications Educated ...

deliver a modern, resilient cyber security function. What you’ll be doing: Lead and develop a Cyber Security Operations team Take ownership of incident detection, response, and recovery Drive SOC maturity improvements and tool optimisation Deliver security insights and risk reporting to senior stakeholders Partner with vendors, forensic … delivery of the security strategy and roadmap What we’re looking for: Proven experience leading SOC/Cyber Security Operations teams Strong background in incident response and threat management Experience with SIEM, monitoring, and detection engineering Knowledge of frameworks such as ISO27001, NIST, GDPR Ability to operate ...

weaknesses and recommend pragmatic remediations. Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents. Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services. Work closely with application teams, platform engineers ...

configuration changes, integrations and automation to improve efficiency and consistency. Monitoring service health, capacity, performance and security, proactively addressing risks and vulnerabilities. Leading complex incident resolution, root-cause analysis and security investigations. Coordinating patching, upgrades, backups, recovery testing and business continuity arrangements. Maintaining technical documentation, operational procedures, asset records … tasks and improve efficiency. Cloud services, SaaS applications, collaboration tools and development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong ...

activities for the Tewkesbury site. Operate and maintain the site's Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary point of contact for EASA regulators and auditors. Coordinate cybersecurity risks … consistency and continuous improvement. What We're Looking For Experience in cybersecurity, information security, governance, compliance, or risk management. Strong understanding of security operations, incident response, vulnerability management, and security best practices. Experience working within aerospace, manufacturing, defence, or other highly regulated environments. Knowledge of cybersecurity frameworks such ...

platform services (e.g. PAM, PKI, cross‐domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments* Platform administration including patching, upgrades, configuration, and account management* Monitoring, alerting, and incident response for platform services* Incident and problem management, including troubleshooting and root cause analysis* Networking concepts (TCP/IP, DNS, DHCP, firewalls)* Automation … services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability or 24/7 service environments* Integration with enterprise ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

What you will do as a Senior Application Engineer*** Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response* Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives.* Contribute to application architecture, integration … environments## ## Desirable:* Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)* SOAR platforms and automation of security response workflows* Integration with monitoring, alerting, and incident response systems* Threat detection, analytics, and use case development* Experience integrating with enterprise services (Active ...

security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability management and incident response. Secure software development and DevSecOps practices. ICT service management approaches including ITIL. Additional Requirements Must be eligible and willing to obtain UK Government ...