25 of 25 Remote/Hybrid Incident Response Jobs in the South West

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

lead a team of highly capable cyber threat analysts protecting Northrop Grumman UK and EMEA operations, while remaining directly involved in threat hunting, incident response, digital forensics and cyber defence activities. Working as part of a global cybersecurity organisation, you will collaborate closely with colleagues across … direction, coaching and day-to-day operational oversight. Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage, investigation and response activities. Serve as Incident Response Lead for major cyber security events, coordinating technical investigations, containment and remediation activities. Lead advanced threat hunting ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

activity by interpreting relevant standards and good practice frameworks, translating requirements into practical actions, and working with Technology Teams to support proportionate implementation. Security Incident Support: Support security incident response by helping assess governance, risk and compliance impacts, coordinating evidence, supporting root cause analysis and ensuring lessons … improvement. Essential Good understanding of information technology security, information security risk and control management. Experience supporting, coordinating or assuring IT security controls, vulnerability management, incident response, IT disaster recovery or IT change governance, ideally while working alongside technical teams who own implementation. Awareness of recognised security standards ...

simulation and training systems, as well as existing deployment and virtualisation tools. Apply SRE practices to improve system reliability, including observability (metrics, logs, tracing), incident response, and root cause analysis. What We Are Looking For: This is not a pure cloud or greenfield platform role. You will … infrastructure. Experience in developing with Go or Python as well as shell scripting. Experience applying Site Reliability Engineering (SRE) practices such as monitoring, alerting, incident response, and service reliability improvement. At Skyral, we are committed to fostering a culture of diversity, equality and inclusion. We also ensure that ...

ownership Owning end-to-end engineering delivery against the data product roadmap: pipelines that are idempotent, tested, observable, and documented Running production operations - monitoring, incident response, root-cause analysis, and ensuring issues are resolved with clear ownership and learning Defining and enforcing engineering standards across the team: coding … delivering and operating production data platforms and pipelines at scale Experience defining and enforcing engineering standards across a team Strong operational mindset: reliability, monitoring, incident response, cost management Hands-on with modern cloud data platforms (e.g. Snowflake, BigQuery, Redshift) Experience with orchestration tools (e.g. Airflow, Dagster), CI/ ...

Incident & Problem Analyst coordinates incident response and drives problem management across HL's enterprise technology estate, ensuring rapid service restoration, reduced repeat failure, and improved operational resilience. Operating within Service Assurance, the role provides run-time control and governance across heritage, cloud, and third-party services, working … root cause insight, known errors, and permanent fixes while protecting service stability and client outcomes. What you will be doing Coordinate end-to-end incident management, including Major Incidents, ensuring rapid service restoration, clear communications, and accurate record keeping. Act as a Service Assurance control point during live incidents ...

platform services (e.g. PAM, PKI, cross‐domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments* Platform administration including patching, upgrades, configuration, and account management* Monitoring, alerting, and incident response for platform services* Incident and problem management, including troubleshooting and root cause analysis* Networking concepts (TCP/IP, DNS, DHCP, firewalls)* Automation … services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability or 24/7 service environments* Integration with enterprise ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

What you will do as a Senior Application Engineer*** Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response* Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives.* Contribute to application architecture, integration … environments## ## Desirable:* Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)* SOAR platforms and automation of security response workflows* Integration with monitoring, alerting, and incident response systems* Threat detection, analytics, and use case development* Experience integrating with enterprise services (Active ...

security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability management and incident response. Secure software development and DevSecOps practices. ICT service management approaches including ITIL. Additional Requirements Must be eligible and willing to obtain UK Government ...

evaluate performance against these SLOs. You will continuously monitor and analyse these indicators, including network performance metrics to detect deviations early, enabling proactive incident response and targeted improvements.You will oversee system and network capacity and performance, manage resource utilisation efficiently, and conduct thorough cost analytics to identify optimisation … Familiarity with PCI DSS and other relevant security frameworks to ensure the infrastructure meets regulatory requirements and best practices.* Strong problem-solving collaboration and incident management capabilities.* Knowledge in network technologies such as TCP/UDP, IPv4/IPv6, Wireless, BGP, VPN, L2 switching, Firewalls, Load Balancers, EVPN, VxLAN ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

validating closure. Planning and delivering adversary simulations, red team-style assessments, purple team exercises and blue team validation activities. Testing monitoring, logging, detection and incident response capabilities against recognised threat behaviours. Designing and facilitating tabletop exercises, crisis management simulations, cyber recovery exercises and executive cyber scenarios. Producing high ...

tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will be of particular interest: Experience contributing to incident response across a complex microservice‐based application Application Security best practice including identifying potential threats and vulnerabilities in applications and cloud infrastructure, designing ...

Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform upgrades, patching, resilience, DR, monitoring and incident response What You'll Bring Strong hands-on experience of enterprise software build, packaging and deployment engineering Strong C# development skills … Server and on-premises hosting knowledge, working knowledge of Linux deployment patterns, and SQL Server database deployment (e.g. DACPAC) Experience working within formal change, incident and release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

accreditation activities. Strong stakeholder engagement and technical documentation skills. Desirable Defence or Aerospace sector experience. Experience working within classified or high-assurance environments. Incident response and secure network experience. #J-18808-Ljbffr ...

across security engineering and architecture. Participation in the out-of-hours on-call support rota is a requirement of the role and includes providing incident response and technical escalation when on call. About You You will bring substantial experience of cyber security architecture, security engineering and secure solution ...

effective delivery of life-critical operations. You’ll contribute to the stability, proactive monitoring and continuous improvement of operational communications services, supporting rapid incident response, service resilience and operational readiness. What you will be doing Support the operation of Airwave radio and associated operational communications infrastructure, ensuring services … procedures. Identify, log and categorise operational communications incidents, ensuring accurate information capture and timely escalation to senior engineers, suppliers or on-call support. Support incident management activities for live operational communications issues, including assisting with diagnostics, restoration actions and communication updates. Assist with major incident support, ensuring accurate ...

Lead to head the EMEA Cyber Security Operations Centre from Cheltenham. You will mentor analysts, manage security operations across the region and act as Incident Response Lead for major events. The role combines technical cyber defence, threat hunting and digital forensics with leadership responsibilities, reporting to senior stakeholders ...

metrics, error rates, and data quality visibility instrumented before deployment Manage vendor relationships at pod level (Gong, Clay, LeanData, ZoomInfo, depending on assignment): SLAs, incident escalation, business reviews, and periodic build‐vs‐buy re‐decisions Support other engineers through code review, pairing, and coaching on architecture trade‐offs … experience building against Salesforce or equivalent CRM APIs: workflows, event‐driven logic, and data integrations across multiple systems Comfortable owning live production systems: incident response, observability, vendor management, and data integrity — draws no hard line between building and running Can translate operational pain into technical requirements and explain ...

deliver secure connectivity across on-premise, cloud and hybrid environments, enabling officers and staff to access critical digital services. You will mentor engineers, drive incident response, and oversee supplier-delivered services while advancing automation and cloud-aware networking practices in a modern DDaT transformation. #J-18808-Ljbffr ...

service management practice across IT Service Operations and must show that it works. The role leads the Service Management team, sets how incident, problem, change and release, knowledge and configuration management are run, and gives risk, audit, and the regulator evidence that service controls are working. The role owns … doing The Service Management team. Its capability, performance, and resilience, so the practice holds up reliably. Fit-for-purpose ITSM processes. Incident, Problem, Change and Release, Knowledge, and Service Asset and Configuration Management work as designed, apply the same way across heritage, cloud-native and SaaS platforms ...