176 to 200 of 654 Incident Response Jobs in the UK

with Helm and Kustomize usage. Database DevOps: Liquibase, Flyway (incl. Redgate Flyway), Bytebase, Atlas (Ariga), Sqitch, SchemaHero, Redgate SQL Change Automation, DBmaestro. Site reliability & incident response (incl. AI‐assisted): incident management and postmortems (PagerDuty, Opsgenie, incident.io, Rootly, FireHydrant, Blameless); AIOps/AI SRE (Resolve.ai, Cleric, Traversal, Neubird ...

strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple‐team/assurance, ransomware preparedness, and crisis playbooks. Maintain … executive incident communications, regulator notifications, and post‐incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. Drive ...

Security Operations capability. This is more than a leadership role. You'll remain hands-on in the fight against cyber threats, leading investigations, driving incident response, mentoring analysts, and strengthening our detection and response capabilities across multiple complex client environments. Whether you're already leading … operational discussions with stakeholders, partners and custom ers. What You'll Bring: Proven experience working within a Security Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel ...

Azure DevOps Pipelines : Design, build, and maintain secure, high-speed CI/CD pipelines within Azure DevOps to automate code promotion and MLOps workflows. Incident Management : Lead the response, containment, and resolution of critical platform outages, serving as a primary escalation point for high-priority cloud and infrastructure … fixes to prevent recurrence. Third-Party Operational Coordination : Act as the direct engineering point of contact for external support teams, actively collaborating on active incident tickets, complex escalations, and day-to-day infrastructure maintenance. Cross-Functional Communication : Document complex technical architectures clearly and articulate system requirements, post-mortems ...

improve our ISMS as the backbone for our security controls and initiatives. Drive ongoing improvement of our security processes, tooling, and standards. Lead security incident response and post-incident reviews, turning lessons into stronger defences. Partner with stakeholders across the business to plan, prioritise, and resource security … AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

Azure DevOps Pipelines : Design, build, and maintain secure, high‐speed CI/CD pipelines within Azure DevOps to automate code promotion and MLOps workflows. Incident Management : Lead the response, containment, and resolution of critical platform outages, serving as a primary escalation point for high‐priority cloud and infrastructure … fixes to prevent recurrence. Third‐Party Operational Coordination : Act as the direct engineering point of contact for external support teams, actively collaborating on active incident tickets, complex escalations, and day‐to‐day infrastructure maintenance. Cross‐Functional Communication : Document complex technical architectures clearly and articulate system requirements, post‐mortems ...

Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management, and security monitoring activities. Participate in security reviews and technical investigations ...

Analyse resource utilization, optimise for performance and cost, and implement automated scaling and rightsizing. Produce dashboards and reports for operational and business stakeholders. Lead incident response for cloud infrastructure issues, including root cause analysis and post-mortem documentation Develop and test disaster recovery and business continuity plans ...

into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential Microsoft Entra ID/Identity Governance: Extensive experience administering Microsoft Entra ID, including Conditional Access, Identity Protection ...

limited to) Azure infrastructure failover, M365 backup/restore, network infrastructure failover. Act as one of the primary points of contact for incident response, and Major Incident Management (MiM). Participate in monthly continuous improvement meetings and collaborate with stakeholders to define recovery objectives, including Recovery Time ...

limited to) Azure infrastructure failover, M365 backup/restore, network infrastructure failover. Act as one of the primary points of contact for incident response, and Major Incident Management (MiM). Participate in monthly continuous improvement meetings and collaborate with stakeholders to define recovery objectives, including Recovery Time ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in Real Time. Perform initial triage ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

helping keep everything running smoothly behind the scenes while we deliver for our customers. You’ll get hands-on with AWS, working across monitoring, incident response, automation, and CI/CD — all the good stuff that keeps modern platforms fast, reliable, and scalable. This isn’t a role … support across multiple applications. Monitor system health, including application environments, scheduled jobs, integrations, and message queues, and contribute to logging and alerting standards. Support incident management activities, including triage, troubleshooting, escalation, root cause analysis (RCA), and continuous improvement based on incident trends. Assist with routine maintenance tasks such ...

vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop and maintain robust disaster recovery and business continuity plans related … NIST, Cyber Essentials), and best practices. Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, vulnerability scanners, endpoint detection and response (EDR), and identity management solutions. Experience with cloud security (e.g., Azure Security). Proven experience in managing security incidents and conducting incident response. ...

programme supporting over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage … management information Develop engaging cyber awareness content across multiple communication channels Deliver security awareness training to technical and non-technical audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research ...

workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong commercial experience with AWS, Azure … understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

trade flow, and post-trade issues* Lead the 'follow the sun' support model coordination, working closely with global teams in APAC and US* Drive incident management practices, trend identification, and post-mortem analysis. Collaborate with development teams to influence platform improvements based on support insights* Occasional weekend work will … approach to the day-to-day, with the resilience to handle high-pressure production incidentsDesired* Experience with Site Reliability Engineering (SRE) practices, including monitoring, incident response, and post-mortem analysis* Proven experience applying AI or machine-learning models to optimise workflows, identify patterns, and drive intelligent automation solutions ...

trade flow, and post-trade issues. Lead the ‘follow the sun’ support model coordination, working closely with global teams in APAC and US. Drive incident management practices, trend identification, and post-mortem analysis. Collaborate with development teams to influence platform improvements based on support insights. Occasional weekend work will … with the resilience to handle high-pressures production incidents Desired Experience with Site Reliability Engineering (SRE) practices, including monitoring, incident response, and post-mortem analysis Proven experience applying AI or machine-learning models to optimise workflows, identify patterns, and drive intelligent automation solutions Hands-on experience with containerization ...

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

Golden Path" templates and adoption Operational Oversight & Risk Management Oversee reliability, performance, and security of platforms and pipelines Lead vulnerability management and remediation Support incident response and post-incident reviews Integrate telemetry across Azure ecosystem (Defender, Entra, WAF) Collaboration Across Technology Act as a senior advisor ...

Paramount+, and many others. Core Responsibilities Analyzes and forecasts system capacity requirements to ensure scalability and performance for high‐profile events. Participate in incident response efforts, conduct post‐incident reviews, and implement corrective actions and improvements to monitoring. Develop and maintain monitors and alerts across all services. ...

third-party and business continuity challenges. The successful candidate will play a key role in shaping resilience strategy, delivering testing and exercising programmes, supporting incident response activity and providing expert advice to senior stakeholders across the business. This role offers significant visibility, exposure to executive-level decision-making … tangible impact within a collaborative and purpose-driven organisation. Key Responsibilities Lead the management and continuous improvement of operational resilience, business continuity and incident management frameworks. Partner with business leaders to provide expert guidance, support and challenge on resilience-related matters. Maintain Important Business Services, impact tolerances, dependency mapping ...