126 to 150 of 642 Incident Response Jobs in the UK

testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence‐capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting … requirements and assessing third‐party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi‐disciplinary engineering delivery environments. Experience handling ...

smarter, from first-drafting and research to pattern-spotting, while upholding the highest standards of confidentiality and responsible AI. What You'll Do Coordinate Incident Response Handle responses to low to medium-risk personal data breaches, with oversight from supervising privacy counsel as appropriate. Handle and assist with … serious and complex data breaches by coordinating breach investigations by triaging facts, collecting documentation, coordinating cross-functional tasks, and preparing draft incident assessments, notifications and regulatory materials for supervising counsel review and approval. Maintain the personal data breach log, clear and organized investigative records, and track post-incident ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

autonomy while encouraging responsible AI adoption, experimentation, and innovation. We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt … scale. You’ll design, architect, and develop world-class case management and investigation capabilities in Go, building workflows that connect detections, evidence, and response actions into cohesive cases. You’ll leverage advanced correlation, contextual enrichment, and AI/ML-powered insights to help security teams prioritize threats and automate ...

documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Work in collaboration with CSC DEx in other Natcos (International Group Companies France, Italy, Germany, Spain etc) Skillset/… functions and operating models. Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering Awareness of Incident response processes. Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs ...

least privilege implementation. Assist with penetration testing and remediation activities. Support security compliance with financial services regulatory requirements. Collaborate with Security Operations and Incident Response teams during security events. Support security assurance for third-party integrations and supplier solutions. Contribute to DevSecOps tooling and automated security testing. Promote … Security Policy-as-Code (OPA) DevSecOps Secure Software Development Lifecycle (SSDLC) Threat Modelling Vulnerability Management Security Monitoring and SIEM Security Compliance and Governance Incident Response ...

Maersk is redefining its cyber incident response, offering a multi-disciplinary role focused on proactive defense and rapid recovery. You will lead technical responses, drive purple-teaming, and shape detections with cutting-edge tools. The position emphasizes continuous learning through CTFs and hands-on research within a world ...

leading remediation activities that improve security and resilience. Oversee secure remote and supplier access, ensuring third-party connectivity is appropriately governed and monitored. Support incident response and recovery planning for identity-related events, including break-glass access and restoration activities. Produce meaningful reporting and assurance evidence for governance … authentication, access governance, audit, recertification and operating effective identity controls within a regulated environment. Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply ...

growth and innovation. You’ll define and lead our security strategy, establish governance and compliance frameworks, strengthen cloud and third‐party security, and drive incident response and resilience planning across the organisation. About You Experience & Expertise 10+ years’ experience in information security, including leadership‐level responsibility Proven experience … building and scaling security and privacy programmes within growing organisations Strong hands‐on knowledge of GDPR, PCI‐DSS, incident response, and resilience planning Experience working within cloud‐first environments, ideally AWS Strong understanding of security within e‐commerce, fintech, or customer‐data‐led businesses Comfortable operating as both ...

United Kingdom. The role focuses on defining and overseeing information security strategy, policies and governance to protect critical assets. The successful candidate will drive incident response, risk management and regulatory compliance, while partnering with executive leadership to align security with business goals and deliver measurable security improvements. #J ...

Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve vulnerability management and threat detection Support secure design and architecture across infrastructure and cloud …/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based out of the Lutterworth offices ...

Provide engineering support for Citrix VDI environments and enterprise-scale identity and endpoint platforms. • Collaborate with cross functional teams to ensure service readiness, effective incident response, and continuous improvement. • Contribute to enterprise service engineering documentation, standards, and automation where applicable. **Qualifications:** *Required:** Active TS/SCI with Poly … service environment. • Experience leading service transitions from on prem to Azure. • Strong documentation habits and ability to communicate complex technical issues clearly. • Familiarity with incident response, root cause analysis, and enterprise change management. • Relevant certifications: Microsoft, Citrix, Tanium, Splunk, or similar.-**What You Can Expect:****A culture ...

partnered with a growing cyber security business in Buckinghamshire, supporting customers with threat monitoring, incident response, and managed security services. They are looking for a Level 3 SOC Analyst to join their experienced SOC team, leading complex investigations and acting as the technical escalation point for major security … develop detection rules, automate workflows, and continuously improve SOC operations The ideal Level 3 SOC Analyst will have: Strong commercial experience within a SOC, incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM ...

long-term technical vision for the platform, aligning with business outcomes and regulatory requirements. Champion a "you-build-it-you-run-it" culture, overseeing incident response and identifying opportunities to automate remediation. Ensure successful collaboration across teams and stakeholders, driving consensus on architectural and delivery trade-offs. Identify … technical and non-technical stakeholders. Ability to translate business objectives into team-level tasks and priorities. Experience managing production systems, including on-call rotations, incident response, and reliability engineering. Experience leading multi-team adoption of enterprise-authorized AI-assisted development and delivery tools, including defining governance/ways ...

report to the Cyber Operations and Engineering Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity , Incident Response , and Disaster Recovery . You will work closely with multiple teams across the IT department and the wider business to ensure that … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

report to the Cyber Operations and Engineering Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity , Incident Response , and Disaster Recovery . You will work closely with multiple teams across the IT department and the wider business to ensure that … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

capability, ensuring effective protection of the organisation's systems, data, and services. Reporting into the Head of Cyber Security, you will oversee security operations, incident response, security engineering, vulnerability management, and the performance of outsourced security partners. Working closely with internal Technology teams and third-party providers … with business objectives. What we're looking for We're looking for an experienced cyber security professional with a strong background in security operations, incident response, and security engineering within a complex technology environment. You will have experience managing security platforms and third-party security service providers, alongside ...

with teams primarily based in the US Establish and drive adoption of engineering best practices within your team, including the operational rigor (on‐call, incident response, postmortems) required for infrastructure that other teams and external partners depend on Contribute to engineering‐wide initiatives as a member … depth to guide architectural decisions and engage credibly in technical discussions Experience operating production distributed systems, with an understanding of what reliability, observability, and incident response require at scale Excellent communication skills, with the ability to build consensus across teams and time zones Demonstrated success building a culture ...

Cyber Essentials) Experience overseeing governance, risk, and assurance activities Broad technical understanding across networks, cloud, infrastructure Hands-on experience leading or coordinating cyber incident response Ability to translate technical risk into clear, business-focused messaging Experience producing reports, dashboards, and presenting to senior stakeholders Strong people leadership skills … System (ISMS) Ensure alignment with standards such as ISO 27001 and Cyber Essentials Identify, assess, and mitigate cyber risks, maintaining the risk register Lead incident response capability, ensuring plans are tested and effective Monitor the threat landscape and advise on emerging risks and mitigations Manage and develop ...

seeking a DFIR Lead Cyber Operations Analyst at VP level in Knutsford. In this key role, you will deliver advanced digital forensics and incident response while leading complex investigations. You will collaborate with internal teams and law enforcement, and produce clear reports under pressure. Ideal candidates will have ...

maturity toward CTEM, and strengthen our Exposure Management model. You’ll ensure alignment with security policies, standards and regulatory requirements, while maintaining and enhancing incident response plans, documentation, risk assessments and remediation records. You’ll also play an active role in training and awareness to promote strong security … hygiene across the organisation. Qualifications To succeed, you’ll bring relevant experience in vulnerability management, risk analysis and incident response, supported by certifications such as CISSP or CISM, plus a degree or equivalent experience in Information Security, Computer Science or a related field. #J-18808-Ljbffr ...

/7 security operations team across a multi-client MSSP environment. You will act as the senior technical authority for threat detection, incident response, and operational excellence, while mentoring analysts and driving innovative SOC improvements. You will stay hands-on, lead complex escalations, refine playbooks, and collaborate with … Threat Intelligence, Engineering and Incident Response to deliver high-value security #J-18808-Ljbffr ...

Palo Alto Networks is seeking a client-facing Principal Consultant to lead reactive services engagements and manage incident response from start to finish. You will guide clients through containment and long-term remediation, leveraging your expert knowledge in digital forensics. This weekend schedule position runs Friday to Monday ...

Life on the team As the Cyber Incident Readiness Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving the end-to-end security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters. You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response and testing. This includes designing and running realistic incident ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3rd tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...