101 to 125 of 642 Incident Response Jobs in the UK

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

infrastructure, implementing and overseeing risk management processes, ensuring that appropriate controls and countermeasures are in place to mitigate all identified risks. Lead the incident response efforts, including preparing for, detecting, and responding to cyber security incidents, ensure that an effective incident response plan is in place … regularly tested and managing post incident analysis and reporting to prevent future occurrences. Manage and mentor the cyber security team, fostering a culture of continuous learning and development, ensuring that the team has the necessary skills and tools to protect the organisation effectively, and oversee recruitment, training, and performance ...

fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. The opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure, Networks, DevOps … outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with the Endpoint Detection and Response ...

Security Engineering team, helping to design, implement and continuously improve the security controls that protect large-scale AWS environments. Working closely with Security Operations, Incident Response, Threat Engineering and Cloud Engineering teams, you'll build and maintain cloud security solutions, improve security automation, and help embed security best … security posture through automation, logging, alerting and continuous improvement Work closely with engineering teams to embed security into cloud platforms and application delivery Support incident response, investigations and remediation activities Contribute to security-by-design initiatives across cloud infrastructure Requirements We're looking for someone who can demonstrate ...

Security Engineering team, helping to design, implement and continuously improve the security controls that protect large-scale AWS environments. Working closely with Security Operations, Incident Response, Threat Engineering and Cloud Engineering teams, you'll build and maintain cloud security solutions, improve security automation, and help embed security best … security posture through automation, logging, alerting and continuous improvement Work closely with engineering teams to embed security into cloud platforms and application delivery Support incident response, investigations and remediation activities Contribute to security-by-design initiatives across cloud infrastructure Requirements We're looking for someone who can demonstrate ...

remain secure, resilient and highly available while supporting continuous delivery and operational excellence. You'll work across cloud infrastructure, automation, CI/CD, monitoring, incident response and platform reliability, collaborating closely with engineering teams to improve how applications are built, deployed and supported. This is an excellent opportunity … native services. Implementing Infrastructure as Code using CloudFormation, AWS CDK and/or Terraform. Monitoring platform performance, availability and system health. Supporting incident response, root cause analysis and continuous service improvement. Skills & Experience Essential Commercial experience in a DevOps, Cloud Engineering or Platform Engineering role. Strong AWS experience ...

cloud platforms and supplier-managed services. This is an excellent opportunity for an experienced cyber security professional who enjoys a blend of security operations, incident response, vulnerability management, security assurance and stakeholder engagement. You will play a key role in improving security controls, reducing organisational risk and enhancing … provide a proactive and consistent cyber security operations and assurance capability across the organisation. You will provide day-to-day security monitoring activities, support incident response processes, manage vulnerability remediation, and contribute to the ongoing development of security controls, policies and procedures. You will need Strong experience ...

modern deployment workflows Observability & Production Operations Experience using observability tools (e.g. Datadog or equivalent) to monitor, troubleshoot, and resolve production issues Familiarity with incident response and continuous reliability improvements On‐Call & Incident Response Willingness to participate in a 24/7 on‐call rotation and support ...

/CD pipeline development and maintenance Application deployment and release management Developer tooling administration (GitLab, Packagist, NPM, Dependabot) Dependency management and automated security updates Incident Management & Observability: Assist with the diagnosis and assessment of technical issues On-call engineering and incident response Monitoring, alerting, and error tracking … OpenSIPS FreeSWITCH Essential experience Required: Experience with CI/CD pipelines and deployment workflows Hands-on experience with cloud infrastructure Application monitoring, alerting, and incident response (any major tooling) Familiarity with load balancing and message queue technologies Maintaining and contributing to shared code libraries and internal tooling Investigating ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

clear documentation of findings Identify security weaknesses, vulnerabilities, and gaps within the environment Recommend and implement improvements to strengthen overall security posture Assist with incident response and remediation activities Support and deliver internal IT security awareness and training initiatives Participate in and contribute to security-related projects … with Microsoft Defender Experience monitoring and responding to security alerts in a SOC or security-focused environment Knowledge of endpoint security, threat detection, and incident response processes Understanding of cybersecurity principles, vulnerabilities, and attack techniques Ability to investigate and analyse security events effectively Experience identifying security gaps ...

alerts within a live SOC environment. Analyse security incidents to determine scope, impact, and priority, ensuring appropriate escalation and response. Manage end-to-end incident response activities from detection through to resolution. Support the development and enhancement of SIEM use cases, detection rules, analytics, and playbooks. Conduct real … cloud environments, and enterprise IT infrastructure. Experience creating and tuning detection use cases, analytics, and playbooks. Knowledge of Information Security principles, threat detection, and incident response practices. Familiarity with Microsoft technologies, Linux systems, and security tooling. Understanding of security frameworks and data protection principles including GDPR ...

cybersecurity who wants to develop their career in a hands-on SOC position. You will be responsible for monitoring and analysing security alerts, supporting incident response activities and helping to protect critical systems against evolving cyber threats. The client is open on specific technology experience and is primarily … Ideally 1+ year of commercial cybersecurity or SOC experience Experience monitoring, analysing and responding to security alerts A basic understanding of SOC operations and incident response principles Knowledge of common cyber threats, attack vectors and malware types A good understanding of networks, operating systems and core security concepts ...

Samsara is seeking an experienced Security Incident Response professional to join our UK‐based EMEA team. You will collaborate with a global group of engineers to monitor security events, lead incidents, and drive digital forensics investigations in support of Employee Relations, Legal, and Information Security cases. You will ...

improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response (IR) Team to develop risk mitigation strategies. ...

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security. The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. ...

Summary DFIR Lead Cyber Operations Analyst – a VP‐level role at the centre of Barclays’ cyber defence, delivering advanced digital forensics and incident response. The analyst will analyse malware, malicious samples, and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This … paced, high‐pressure environment. The role includes on‐call support rotation with occasional extended hours and weekend work as required. Qualifications Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with ...

plus core services. LAN/WAN network security & patch management. VM management (VMware/Proxmox). Cyber Security & Firewall management. AWS cloud administration. IT Incident response & DR. What youll need: A minimum of 5+ years experience in IT Infrastructure/Networking/Service Delivery or equivalent roles. … patching, software deployment and lifecycle management). Working knowledge of identity and security controls (e.g., MFA, Conditional Access, RBAC/least privilege) and supporting incident response activities. Experience working within a Service Desk/ticketing environment, managing workload to SLAs and owning incidents/requests through to resolution. ...

DFIR Lead Cyber Operations Analyst , a VP-level role at the centre of the bank’s cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This … support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive-level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well-defined cross-region handoff processes Own end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white-glove support for leadership Define and maintain SLAs and quality standards; track and report on ticket volume ...

Senior Cyber Security Operations Lead for a six‐month, fully remote contract with European Time Zone hours and Inside IR35. You will drive incident response and security operations across a global environment. The role requires hands‐on expertise with SIEM/EDR, vulnerability tools, and cloud security, while ...

testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting … requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling ...