1,001 to 1,025 of 2,368 Incident Response Jobs in the UK

automation. Site Reliability Engineering Design, implement, and maintain systems for high availability, scalability, and performance. Monitor and improve application reliability through proactive measures and incident response. Develop and maintain observability solutions (metrics, logging, tracing). Participate in on-call rotations and drive root cause analysis for incidents. Collaboration & Continuous ...

Kubernetes, etc.). Proficiency in observability tools (Prometheus, Grafana, ELK, OpenTelemetry). Security-first mindset with hands‐on experience in access control, encryption, and incident response. Solid networking knowledge - protocols, routing, firewalls, and cloud networking. Experience integrating and optimizing software delivery ecosystems (Git, Artifactory, Jenkins) as part ...

embed security practices.Act as a trusted advisor to business and technology stakeholders on AI-related risks.Provide security design reviews for AI initiatives.8. Monitoring & Incident ResponseDefine monitoring for model drift, anomalies, and misuse detection.Develop playbooks for AI-related security incidents, including model compromise or data breaches.Lead investigations involving AI system ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

reliability, performance, and scalability of our platforms Set technical direction through design reviews, architecture proposals, and clear written documentation Participate in and improve incident response, and drive the follow-through that keeps the same incident from recurring Improve the cost effectiveness of our cloud footprint through visibility ...

including the development and mentoring of the Level 2 Analyst, monitoringnetworks to actively remediate unauthorised activities. Requirements Tasks: Developand integrate security event monitoring and incident management services. Respond tosecurity incidents as they occur as part of an incident response team. Implementmetrics and dashboards to give visibility … Enterprise infrastructure. Assistwith the leadership of a composite cyber response team during incidents andinvestigations Use of theSOAR platform to assist with playbook automation and case managementcapabilities to streamline team processes and tools. Produce documentationto ensure the repeatability and standardisation of security operatingprocedures. Developadditional investigative methods using the Authority ...

analysis, estimation, planning, code reviews, architecture sessions, and retrospectives to drive delivery outcomesEstablishes reliability goals and implements observability, resilience patterns, and operational readiness practicesLeads incident response and post-incident reviews to improve production stability and performance; identifies recurring issues and drives automation/remediationUpholds secure-by-default ...

lifecycle. The role combines technical leadership, operational excellence, stakeholder management, and people leadership, requiring an individual who is equally comfortable discussing model performance, coordinating incident response activities, managing enhancement roadmaps, and engaging senior business stakeholders. What will you do in this role? Own Production AI Solutions Assume operational … place for all production AI solutions. Maintain an accurate inventory of supported solutions, dependencies, business owners, and support requirements. Lead AI Support & Incident Management Coordinate investigation and resolution of production issues affecting AI solutions. Manage defect remediation activities and oversee the delivery of code fixes through internal and partner ...

alerts.Testing & Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows.Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise on containment/ ...

move from day-to-day operations toward architecture, strategy, and mentoring, acting as the escalation point for the Associate Security Engineer.Key ResponsibilitiesVulnerability & incident managementOwn and operate our bug bounty program: manage the platform, set escalation thresholds, and drive strategic improvements.Act as escalation point for vulnerability triage, taking the lead … complex or high-severity findings.Lead security incident response: qualification, forensics (including fraud investigations), fix coordination, post-mortem, and resolution tracking.Detection & SIEMOwn our SIEM platform (ElasticSearch, multi-node Linux): architecture, detection rules, and indicators of compromise.Build and evolve detection coverage, focusing on signal quality over manual toil.Build and maintain ...

pragmatic, well‐understood patterns over those who lean on theory, jargon, or unnecessary complexity. A platform you've built and kept running, or an incident you've resolved and can clearly explain, will count for far more than a stack of certifications. Core Responsibilities Provision, configure, and harden … example CloudWatch) across services and infrastructure Maintain data pipelines, backup, and lifecycle management for Aurora PostgreSQL and other AWS‐native data tooling Platform Operations & Incident Response Act as first responder for infrastructure incidents, supporting root cause analysis and post‐incident review Coordinate patching, upgrades, and lifecycle management ...

pragmatic, well‐understood patterns over those who lean on theory, jargon, or unnecessary complexity. A platform you've built and kept running, or an incident you've resolved and can clearly explain, will count for far more than a stack of certifications. Core Responsibilities Provision, configure, and harden … example CloudWatch) across services and infrastructure Maintain data pipelines, backup, and lifecycle management for Aurora PostgreSQL and other AWS‐native data tooling Platform Operations & Incident Response Act as first responder for infrastructure incidents, supporting root cause analysis and post‐incident review Coordinate patching, upgrades, and lifecycle management ...

part of this role is leading our adoption of AI within operations — using LLM-based tooling, agentic workflows, and automation to reduce toil, accelerate incident response, and raise the operational leverage of the whole department. We're not looking for someone to write a strategy deck about … products consumed by engineering teamsSRE & reliabilityDefine and drive SLOs, error budgets, and observability standards (metrics, logging, tracing) across the platformTake part in post-incident reviews and help with the resulting reliability work to completionContinuously reduce toil through automation — if we've done it manually twice, you're already scripting ...

including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical ...

part of this role is leading our adoption of AI within operations — using LLM-based tooling, agentic workflows, and automation to reduce toil, accelerate incident response, and raise the operational leverage of the whole department. We're not looking for someone to write a strategy deck about … engineering teams********SRE & reliability***** ****Define and drive SLOs, error budgets, and observability standards (metrics, logging, tracing) across the platform***** ****Take part in post-incident reviews and help with the resulting reliability work to completion***** ****Continuously reduce toil through automation — if we've done it manually twice, you're already ...

Falcon. You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities. What your days will look like Lead day‐to‐day operations across Analysis and Engineering teams delivering Managed Cyber Defence services. … ongoing client interactions related to service delivery and performance. Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage). The role is for you if: You have experience of embedding AI tooling within ...

people, platforms, and world‐class research. This is a hands‐on, impactful role at the centre of our cyber‐security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture. You will work closely with IT, research computing, governance, and legal teams to ensure … accuracy. Investigate and triage security alerts, escalating and responding appropriately. Act as a responder for security incidents, supporting containment, eradication, and recovery. Produce clear incident documentation, including reports and root‐cause analysis. Develop and refine detection rules, automation workflows, and threat‐based use cases. Apply threat intelligence to improve ...

advertised to attract the right skills needed for the roleThe post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10 % per annum. Please … they are escalated and handled with the correct level of technical understanding for successful remediation by the affected organisations.In the event of a major incident, depending on your experience, you may also support the incident response activities and onwards more detailed investigations.The CSOC has an excellent training ...

Research in London is seeking a Senior CSIRT Analyst to join the Cyber Security Incident Response Team, specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt for threats across a diverse technology landscape. As a senior member … mentor junior analysts, contribute to automation initiatives, support the on-call escalation rota, and work with Elastic, Azure and AWS to strengthen detection and response #J-18808-Ljbffr ...

Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective … liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload ...

then prioritise and track fixes with engineering and technology teams. Develop and maintain security standards, engineering patterns and technical documentation for secure delivery. Support incident investigation and response activities, including technical analysis, containment and follow-up actions. Collaborate with engineers, architects and operational teams to embed security requirements … control decisions. Qualifications, Skills and Experience Practical experience designing and implementing security controls for infrastructure, applications and platforms. Knowledge of security architecture, vulnerability management, incident response, and security control implementation. Experience reviewing technical designs to identify security risks and define clear remediation actions. Experience securing cloud or hybrid ...

technology deployments. Application Support Serve as a technical resource for internally developed and third-party business applications. Troubleshoot application, integration, and performance issues. Coordinate incident resolution with software developers, vendors, and business stakeholders. Participate in application deployment, testing, and change management activities. Create and maintain application support documentation … workflows between business systems. Security & Compliance Support cybersecurity initiatives, vulnerability remediation, and security best practices. Assist with audit, compliance, and documentation requirements. Participate in incident response and root cause analysis activities. Ensure systems adhere to organizational security standards and policies. Operations & Support Provide technical support and escalation assistance ...

controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess … Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness.Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response.Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design).Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar ...

CD. Experience with Azure Lighthouse and Microsoft Partner Center. Experience leading complex incidents, root cause analysis, and problem management. Strong understanding of ITIL-aligned Incident, Problem, Change, and Service Management. Experience mentoring and supporting Level 1 and Level 2 engineers. Strong customer-facing and stakeholder management skills. Ability … 24x7 on-call rota. What You Will Do Act as the senior technical escalation point for complex Azure incidents and service requests. Lead major incident response, technical investigations, and root cause analysis. Mentor and provide technical guidance to Level 1 and Level 2 engineers. Support and optimise customer ...

attract the right skills needed for the role The post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10 % per annum. Please be aware … escalated and handled with the correct level of technical understanding for successful remediation by the affected organisations. In the event of a major incident, depending on your experience, you may also support the incident response activities and onwards more detailed investigations. The CSOC has an excellent training ...