126 to 150 of 309 Incident Response Jobs in the UK

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation, AI and modern technology ...

security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability management and incident response. Secure software development and DevSecOps practices. ICT service management approaches including ITIL. Additional Requirements Must be eligible and willing to obtain UK Government ...

practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across … Helm, Kustomize, Argo CD, Flux, or continuous integration systems Experience with observability stacks and site reliability engineering practices, including service level indicators and objectives, incident response, and post-incident reviews Exposure to regulated environments and implementing security and compliance controls without compromising developer experience ABOUT ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

role in driving reliability, performance, and operational excellence across Ricoh's hybrid cloud and on-prem environments. You will help shape SRE practices, support incident and problem management, embed automation, and ensure infrastructure operations meet the highest security and compliance standards, including ISO 27001. This is a hands … managing error budgets for core services Implementing standards for availability, latency, performance, capacity, and scalability Leading and contributing to root-cause analysis and major incident reviews Supporting a blameless post-mortem culture with clear action tracking Defining and implementing SRE practices, tooling, and engineering standards Driving infrastructure-as-code ...

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive risk down and evidence progress. Security Incident Response: Act as a senior responder for security alerts and incidents, leading investigation, containment and post-incident review alongside the global ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

Logic Apps or SOAR experience Detection-as-Code and CI/CD pipeline experience PowerShell or Python scripting skills Experience supporting Threat Hunting or Incident Response activities Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures (AWS/Azure ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures (AWS/Azure ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures (AWS/Azure ...

navigate security case approvals and risk management frameworks. • Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills • Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. • Hands-on experience with cloud security postures ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

code. Build CI/CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices and reviews that turn production issues into lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection … Experience with Terraform or comparable infrastructure-as-code tools. Knowledge of Docker, Kubernetes and CI/CD tooling. A solid understanding of observability and incident management. Strong cloud security knowledge and an understanding of operating within a regulated environment. An automation-first approach and confidence taking ownership ...

maintain secure, resilient infrastructure and platform services Champion security best practices across infrastructure design, configuration, and operations Support infrastructure hardening, vulnerability management, monitoring, and incident response activities Implement and maintain Infrastructure as Code solutions Collaborate with engineering, architecture, and security teams to improve platform reliability and security posture … working within complex enterprise environments Strong stakeholder engagement and problem-solving skills Desirable Experience Experience working within government or highly regulated environments Exposure to incident management and operational support activities Understanding of compliance-driven infrastructure delivery ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

enforce security and technical standards Lead Infrastructure as Code (IaC) practices across teams and environments Drive observability, monitoring, logging and audit controls Support incident response, patching, compliance reporting and technical debt remediation Partner with developers and delivery teams to improve engineering quality and security Document security processes, controls ...