151 to 175 of 642 Incident Response Jobs in the UK

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3rd tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3 tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3 tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

platforms. Drive AI security and observability: Build out dedicated auth/permissions for internal AI agents, establish deep monitoring/observability pipelines, and define incident response protocols for AI‐specific anomalies. Verification and Red Teaming: Lead continuous verification efforts and red teaming exercises to proactively identify vulnerabilities, prompt … that accurately reflect the real‐world performance and safety of our internal‐facing AI tooling and harnesses. Resilient Internal Infrastructure: AI security, monitoring, and incident response are treated as first‐class citizens, ensuring that any erratic agent behaviour in our internal platforms is immediately caught and mitigated before ...

looking for a DFIR Lead Cyber Operations Analyst, a VP-level role focused on cyber defense. This position demands expertise in digital forensics and incident response, and the ability to analyze malware and network activity while effectively communicating findings. The ideal candidate will excel under pressure, possess leadership ...

operates large-scale defensive capabilities for a major UK bank. The role drives strategic direction in cyber defence, detection engineering, threat hunting and incident response, while steering improvements across security platforms, tooling and processes. #J-18808-Ljbffr ...

scale. Experience with agentic systems and using AI to support production operations, including familiarity with LLM-based tooling, AI-driven automation, or intelligent incident response systems. Ability to understand complex relationship between the organization and its environment, identify connections, adopt different perspectives and quickly respond to changing circumstances … production operations. Lead and contribute to the cross-SRE AI Ops program, driving the strategic adoption of AI/ML tools to improve incident response, reduce toil, and enhance service reliability across Ads SRE. Focus on optimizing existing systems, build infrastructure, and eliminate work through automation ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

correctness, compatibility, and safe rollout and rollback. Strengthen monitoring, alerting, and diagnostics to detect problems early and reduce customer impact. Participate in on-call, incident response, and root-cause analysis, and turn operational learnings into lasting engineering improvements. Work across product and infrastructure teams to ensure new systems … writing reliable, maintainable production code. Experience designing, building, or improving services, platforms, or shared infrastructure at scale. Familiarity with production reliability practices, including monitoring, incident response, root-cause analysis, and operational readiness. Experience diagnosing performance, scalability, or reliability issues in production environments. Understanding of distributed systems, data storage ...

disruption to business operations. The role partners closely with functional and business teams to embed legal and compliance considerations into internal systems, product development, incident response, and business operations. This position has no direct reports but operates at an executive level in the Law Department with significant influence … Strong contracting capability for data privacy and data governance terms, including data access and data rights provisions, security addenda, audit rights, and flowdown clauses. Incident response and regulatory engagement experience, including breach notifications, investigations, and interactions with regulators in the EU. Qualifications You Must Have J.D. (or equivalent ...

boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD. Technology & Service Development Evaluate and implement boundary security technologies and tools. Design automation and orchestration for boundary security operations. Lead ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands‐on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands‐on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in Real Time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

Security Engineer Scotland-OccasionaltraveltoofficeinEdinburgh Schedule: Rotating shift (includes nights/weekends) Salary up to £80,000 You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … cybersecurity, or infrastructure Degree in Computer Science or a related field Strong networking fundamentals TCP/IP, routing, Layer 13 troubleshooting Proven experience in incident response and customer-facing technical roles The temperament to own and resolve incidents under real pressure Excellent communication skills clear, calm, customer-ready ...

stability of software applications and systems. Provides operational support and leadership for production systems in a "you‐build‐it‐you‐run‐it" culture, including incident response, post‐incident learning, and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes‐oriented ...

expected to independently manage monitoring platforms, triage and resolve incidents, validate backup operations across both cloud and on-premises environments, and provide meaningful first-response support for critical P1 and P2 incidents. You will work within a dedicated five-person team participating in a weekly on-call rota … provide 24x7 P1 incident response coverage. The role demands strong technical foundations across both Microsoft Azure and VMware virtualisation platforms, along with a disciplined approach to ITSM processes, documentation, and patching support. WHAT WE EXPECT Minimum of 3-5 years of experience in enterprise infrastructure support roles, ideally ...

operations, improve cyber resilience and influence security awareness across a large and complex organisation. If you enjoy combining technical security expertise with threat intelligence, incident response and user engagement, this contract offers the opportunity to make a visible impact from day one. What's on Offer? £413.40 … Opportunity to work alongside experienced cyber security professionals within a mature security function. Broad, varied role covering Security Operations, Threat Intelligence, Security Awareness and Incident Response. A high-profile enterprise environment that will strengthen your CV. Immediate start with the potential for contract extension. The Role Working closely with ...

with Helm and Kustomize usage. Database DevOps: Liquibase, Flyway (incl. Redgate Flyway), Bytebase, Atlas (Ariga), Sqitch, SchemaHero, Redgate SQL Change Automation, DBmaestro. Site reliability & incident response (incl. AI‐assisted): incident management and postmortems (PagerDuty, Opsgenie, incident.io, Rootly, FireHydrant, Blameless); AIOps/AI SRE (Resolve.ai, Cleric, Traversal, Neubird ...