101 to 125 of 309 Incident Response Jobs in the UK

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What ...

embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers. Responsibilities Maintain and improve security … system owners and confirm that corrective actions are effective. Investigate security alerts and incidents, coordinating with internal teams and external security specialists. Maintain practical incident-response procedures, escalation routes and supporting documentation. Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable ...

Security Incident Management Analyst (x3) Onsite in Inverness or Preston £450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi … security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership ...

Security Operations Centre (CSOC). You'll take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify … Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs ...

play an important role in protecting clients from evolving cyber threats. You will work with a range of security technologies, analyse security events, support incident response activities and contribute to the ongoing development and improvement of security services. This is an excellent opportunity for someone looking to build … doing Analyse security events, investigate alerts and identify potential cyber threats. Perform log analysis and correlate events across multiple security platforms. Support incident investigation, response and remediation activities. Deploy, manage, maintain and improve security tooling, including SIEM, EDR and vulnerability management platforms. Develop and implement automation to improve ...

prioritising, and managing security risks using industry-leading security tools. Planning and delivering security patching and system hardening initiatives. Investigating security events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection … response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within a regulated environment. Promoting secure engineering practices and mentoring technical teams on security best practices. What We're Looking For Essential Experience Experience in Security Operations, Security Engineering ...

prioritising, and managing security risks using industry-leading security tools. Planning and delivering security patching and system hardening initiatives. Investigating security events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection … response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within a regulated environment. Promoting secure engineering practices and mentoring technical teams on security best practices. What We're Looking For Essential Experience Experience in Security Operations, Security Engineering ...

working. Desirable Experience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident-management or incident-response experience. Experience with Splunk or similar logging/SIEM platforms. Experience with security metrics, dashboards or reporting that ...

coverage across on-site and offshore support hours. Use SQL scripting, automation, monitoring, and observability tools to improve operational resilience, service health, reliability, and incident response. To be successful in this role, were seeking the following: Excellent SQL scripting skills. Strong scripting and automation skills using languages such … Proven skills and track record in AI automation, including the use of intelligent automation capabilities to reduce manual effort, improve operational efficiency, and enhance incident response workflows. Experience applying AI and automation solutions for alert correlation, anomaly detection, predictive monitoring, and service optimisation. Strong understanding of Site Reliability ...

standards and benchmarks. Collaborating with engineering and security teams to embed security best practices throughout the technology lifecycle. Supporting vulnerability management, endpoint security, and incident response activities where required. What We're Looking For 3+ years' commercial experience working in a Cyber Security Engineer, Security Operations, or Infrastructure ...

configuration changes, integrations and automation to improve efficiency and consistency. Monitoring service health, capacity, performance and security, proactively addressing risks and vulnerabilities. Leading complex incident resolution, root-cause analysis and security investigations. Coordinating patching, upgrades, backups, recovery testing and business continuity arrangements. Maintaining technical documentation, operational procedures, asset records … tasks and improve efficiency. Cloud services, SaaS applications, collaboration tools and development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong ...

capabilities across a range of technical environments. You will play a key role in designing, implementing and maintaining security solutions, proactively identifying risks, supporting incident detection and response, and ensuring compliance with recognised security standards and best practices. Key Responsibilities Design, implement and maintain security tools, systems … using tools and frameworks such as CIS Benchmarks. Identify vulnerabilities, assess risks and support the implementation of effective remediation measures. Contribute to security monitoring, incident detection, response and threat intelligence activities. Skills and Experience The ideal candidate will have experience in several of the following areas: Strong understanding ...

automated compliance validation, vulnerability management and secure-by-design principles throughout the software delivery lifecycle. Implementing monitoring, logging and alerting solutions to improve observability, incident response and operational insight. Supporting incident, problem and change management activities while continuously improving DevOps maturity and platform capabilities. What ...

This is an exciting opportunity to take on a varied, hands-on role at the heart of security operations, combining proactive threat monitoring and incident investigation with wider infrastructure support. You will work across cloud, network and endpoint security technologies, helping to identify risks, respond to emerging threats … role Experience in a Service Desk, IOC, NOC, or managed services environment would be beneficial. Strong knowledge of cyber security principles, security monitoring and incident response. Experience with SIEM, endpoint security and security event investigation (Microsoft security or ELK stack preferred but not required) Experience with digital forensics ...

This is an exciting opportunity to take on a varied, hands-on role at the heart of security operations, combining proactive threat monitoring and incident investigation with wider infrastructure support. You will work across cloud, network and endpoint security technologies, helping to identify risks, respond to emerging threats … Analyst/Engineer role Experience in a Service Desk, IOC, NOC, or managed services environment. Strong knowledge of cyber security principles, security monitoring and incident response. Experience with SIEM, endpoint security and security event investigation (Microsoft security or ELK stack preferred but not required) Experience with digital forensics ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response and risk management. Desirable Industry certifications such as Microsoft SC-200, AZ-500, SC-100, or ISC SSCP, CCSP, or CISSP. This ...

delivery lifecycle Develop automation tooling using Ansible, Python and Bash Work closely with developers, product owners and stakeholders within Agile delivery teams Participate in incident response, root cause analysis and continuous service improvement activities Provide support within a 24/7 operational environment, including participation ...

maintenance and updates to roll out new features and keep the platform secure. Participate in a 24/7, on-call rotation for incident response escalation within response and on-site Service Level Agreements (SLA). Provide technical implementation support in customer environments, including guidance on implementation ...

pipelines to support safe, consistent delivery across environments. Maintaining and improving observability across the platform estate, including monitoring, logging, alerting, and dashboards. Supporting technical incident response and post-incident reviews, contributing to problem management and long-term remediation. Maintaining platform security standards, including access control reviews, vulnerability … Elemental services such as MediaLive, MediaConvert, and MediaPackage. Supporting live events and broadcast-critical streaming services, including monitoring, quality assurance, and incident response. Income-generating platform work Contributing to the development and operation of server-side ad insertion capability and other income-generating platform initiatives. Supporting the technical delivery ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

technical expertise with strategic client guidance, you will help Trident and its clients identify threats, reduce risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting … enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication, recovery and post-incident review activity across clients, internal teams and third parties. Provide clear risk assessments, incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements ...