176 to 200 of 343 Incident Response Jobs in the UK

full time in the office) Salary: £50,000 - £60,000Role and responsibilities Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel … support compliance and mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft ...

full time in the office) Salary: £50,000 - £60,000Role and responsibilities Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team. · Lead serious incidents, forensic investigations and root cause analysis. · Develop detections, automation and orchestration; conduct proactive threat hunting. · Engineer Sentinel … support compliance and mentor colleagues. Experience and qualifications · Substantial SOC, cyber operations or security engineering experience. · Hands-on Sentinel, Defender XDR and CrowdStrike expertise. · Incident response, malware analysis, forensics and threat hunting. · Advanced KQL; PowerShell and/or Python automation. · Entra ID, Conditional Access, Intune and Microsoft ...

monolith to microservices on EKS. Define standards for containers, runtime environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI/SLOs, incident management, DR/BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI/CD pipelines, IaC, and software supply chain … networking, KMS, RDS, and multi-account architecture. Hands-on Kubernetes, CI/CD, Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands ...

requires a credible engineering background. The successful candidate is expected to work directly across Azure platform engineering, CI/CD, Bicep/ARM, automation, incident response and operational controls, while leading the team and setting standards. They must be able to challenge technical decisions, understand operational risk … mode, rollback and supportability thinking; involve senior engineers and technical leadership where specialist authority is required. Own platform SLAs/SLOs, service health, major-incident command, root-cause analysis, disaster recovery, business continuity testing and continuous service improvement. Operational Controls, Standards & Compliance Take day-to-day ownership within ...

configurations, owners, evidence and testing methods. * Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements. * Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews … identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps. * Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation. * Ability to automate security and assurance processes using technologies such ...

looking for a Security Engineer to take ownership of network and device security across internal and customer environments. The role covers security monitoring, incident response, vulnerability management, security solutions and providing technical security expertise across network environments. Key Responsibilities Develop and implement information security policies, controls and solutions. ...

/CD pipelines and drive adoption of GitOps practices Build self-service tooling that lets product teams ship without platform bottlenecks Improve observability, incident response and SLO tracking Lead infrastructure-as-code standards using Terraform Champion security and cost optimisation across the platform Essential Requirements 5+ years ...

/CD pipelines and drive adoption of GitOps practices Build self-service tooling that lets product teams ship without platform bottlenecks Improve observability, incident response and SLO tracking Lead infrastructure-as-code standards using Terraform Champion security and cost optimisation across the platform Essential Requirements 5+ years ...

/CD pipelines and drive adoption of GitOps practices Build self-service tooling that lets product teams ship without platform bottlenecks Improve observability, incident response and SLO tracking Lead infrastructure-as-code standards using Terraform Champion security and cost optimisation across the platform Essential Requirements 5 years ...

position, candidates must hold or be eligible to obtain eDV Security Clearance. This is an opportunity to work across risk assessment, security architecture, and incident response, playing a central role in protecting critical digital assets and sensitive information. The Role As a Cyber Security Engineer, you'll play ...

designs and platform initiatives. Delivery & Problem-Solving Take ownership of well-scoped platform tasks, upgrades and new capabilities from development through to delivery. Support incident response, troubleshooting, and root-cause analysis, escalating more complex issues when appropriate. Participate in technical and design discussions, contributing ideas and practical solutions. ...

functional requirements Identify and surface issues proactively and help drive improvements to code quality, observability, and system architecture Participate in operational ownership, including monitoring, incident response support, root-cause analysis, and follow-through on remediation work The role is based in London and requires ...

proportionate, practical controls Challenging network, infrastructure and cloud configurations constructively with engineers and suppliers Providing expertise and oversight across vulnerability management, security monitoring and incident response Explaining security risk and its business impact clearly to Executives Seeing improvements through to implementation with teams who do not report ...

throughout the software delivery lifecycle Optimise Azure environments for performance, scalability, reliability and cost efficiency Support model-serving infrastructure and AI observability capabilities Lead incident response and drive continuous improvement across production environments Work closely with engineering teams delivering microservices and distributed cloud-native applications Required Experience Significant ...

trust wide IT systems, including firewalls and filtering, investigate security alerts and potential cyber security incidents, documenting investigations and resolutions. Helping maintain and update incident response documentation and procedures. Support vulnerability identification, assessment and remediation activities. Including updates and patching systems. Assist with ICT audits, including compliance reviews ...

Trust principles, network segmentation, encryption, key management, and secure access control models. Partner with Security Operations and SOC teams to ensure monitoring, logging, and incident response capabilities are embedded Develop automation and service optimisation strategies to improve performance, cost efficiency, and availability. Conduct capacity planning, resilience engineering, disaster ...

security release plan. Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews. Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources ...

security release plan. Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews. Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources ...

Resource Manager (ARM) and Ansible, automating provisioning across development, testing and production. Establish advanced monitoring and alerting using AWS CloudWatch and Azure Monitor, define incident response strategies, conduct root cause analysis and provide P1/P2 support for critical infrastructure. Develop and enforce security practices covering IAM policies ...

/IP, firewalls, load balancers), and post-migration performance stabilization. 4. Support, Operations & Compliance Provide tier-3 production support and participate in major incident response and root cause analysis (RCA). Execute operational changes under standard ITIL frameworks (Incident, Problem, and Change Management). Maintain clear operational ...

/IP, firewalls, load balancers), and post-migration performance stabilization. 4. Support, Operations & Compliance Provide tier-3 production support and participate in major incident response and root cause analysis (RCA). Execute operational changes under standard ITIL frameworks (Incident, Problem, and Change Management). Maintain clear operational ...

leadership across cybersecurity transformation programmes. Essential Experience Cyber Security Architecture Strong cybersecurity background in one or more of: Identity & Access Management (IAM) Security Operations & Incident Response Threat & Vulnerability Management Cloud Security Infrastructure Security Network Security Application Security Data Security Cryptography Experience working on large-scale IT and cyber … Solution Architecture. Ability to communicate complex security concepts to both technical and non-technical stakeholders. Knowledge of security governance, risk management, threats, vulnerabilities, and incident response. Identity & Access Management 3+ years' experience with HashiCorp Vault (preferably on-prem). 3+ years' experience using Terraform, including development of complex reusable ...

that standardize build, test, and deploy flows with auditable delivery. Automate onboarding and environment setup to minimize manual effort for application teams. Deliver runbooks, incident response guides, and self-healing automation for critical services. Contribute to platform architecture for shared hosting and delivery pipelines across multiple clouds. Design … logging, metrics, alerts, registries, DNS, and TLS. Enforce guardrails such as resource limits, quotas, network policies, and least-privilege access. Participate in post-incident reviews and drive improvements for reliability and cost efficiency. BASIC QUALIFICATIONS Strong experience in platform engineering, DevOps, and cloud-native infrastructure. Deep expertise in Kubernetes ...

that standardize build, test, and deploy flows with auditable delivery. Automate onboarding and environment setup to minimize manual effort for application teams. Deliver runbooks, incident response guides, and self-healing automation for critical services. Contribute to platform architecture for shared hosting and delivery pipelines across multiple clouds. Design … logging, metrics, alerts, registries, DNS, and TLS. Enforce guardrails such as resource limits, quotas, network policies, and least-privilege access. Participate in post-incident reviews and drive improvements for reliability and cost efficiency. BASIC QUALIFICATIONS Strong experience in platform engineering, DevOps, and cloud-native infrastructure. Deep expertise in Kubernetes ...

that standardize build, test, and deploy flows with auditable delivery. Automate onboarding and environment setup to minimize manual effort for application teams. Deliver runbooks, incident response guides, and self-healing automation for critical services. Contribute to platform architecture for shared hosting and delivery pipelines across multiple clouds. Design … logging, metrics, alerts, registries, DNS, and TLS. Enforce guardrails such as resource limits, quotas, network policies, and least-privilege access. Participate in post-incident reviews and drive improvements for reliability and cost efficiency. BASIC QUALIFICATIONS Strong experience in platform engineering, DevOps, and cloud-native infrastructure. Deep expertise in Kubernetes ...