201 to 225 of 2,202 Incident Response Jobs in the UK

team engagements, assumed-breach testing, adversary emulation, and threat intelligence-led penetration testing is in high demand. Our collaborative ties to our forensic and incident response team, detection engineering team, threat intelligence team, and wider Cyber Risk practice enable us to deliver high-impact offensive security engagements … affect red team operationsSupport purple team engagements by executing agreed TTPs, working with client security teams, validating detection logic, and helping clients improve response capabilityConduct authorised social engineering activity, including reconnaissance, phishing, vishing, pretext development, and controlled initial access scenariosConduct research and development to improve Kroll’s red team ...

Cirrus Logic business roadmap. Develop and implement security requirements, policies, and procedures to protect information systems, data, and applications. Participate in detection and incident response activities, including investigation, containment, and remediation. Perform hands‐on evaluation, engineering, and administration of enterprise security tools in collaboration with Security … Bachelor’s degree in cybersecurity, information systems, or a related technical field, or equivalent practical experience. Experience across multiple cybersecurity domains, including vulnerability management, incident response, identity and access management, network security, risk analysis, security operations, and security engineering. Demonstrated success operating as a senior individual contributor ...

stack-level configurationSupport new region and cluster rollouts, including the operational paths required to bring stacks online safely in new Grafana Cloud regionsImprove incident response and recovery paths for stack misalignment, reconciliation failures, plugin rollout issues, and Hosted Grafana integration failuresPartner with Product, Hosted Grafana, Infrastructure, Support … external stakeholders.Familiarity with Kubernetes in AWS, GCP, or Azure, and exposure to infrastructure-as-code tooling (Helm, Terraform, Jsonnet, etc.).Experience participating in blameless incident response and contributing to post-incident reviews.Bonus Points For:Experience with TypeScript/Node.jsExperience with Kubernetes control-plane patterns, operators, reconcilers ...

level configuration Support new region and cluster rollouts, including the operational paths required to bring stacks online safely in new Grafana Cloud regions Improve incident response and recovery paths for stack misalignment, reconciliation failures, plugin rollout issues, and Hosted Grafana integration failures Partner with Product, Hosted Grafana, Infrastructure … Familiarity with Kubernetes in AWS, GCP, or Azure, and exposure to infrastructure-as-code tooling (Helm, Terraform, Jsonnet, etc.). Experience participating in blameless incident response and contributing to post-incident reviews. Bonus Points For: Experience with TypeScript/Node.js Experience with Kubernetes control‐plane patterns, operators ...

Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security best practice across … Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat intelligence research, analysing emerging ...

capabilities for critical services. You Have: 8+ years of experience leading or advising on enterprise technology, resilience, cybersecurity, infrastructure, disa ster recovery, business continuity, incident response, or crisis management disciplines for large, complex European or global organizations Experience with advising executive stakeholders and leading senior-level advising … capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role, including with a top-tier consulting company ...

Review and provide guidance on security risk assessments, risk mitigation plans, mitigation gap analysis, and security management documentation in support of system cybersecurity certification. Incident Response & Lifecycle Security Establish and maintain a Product Security Incident Response (PSIR) process, encompassing coordinated vulnerability disclosure, patch deployment pipelines … post-field incident analysis. Define and oversee security monitoring requirements for deployed fleets, ensuring field data feeds back into risk files and security artefacts in line with post-market surveillance obligations. Commercial & Bid Support Support the production of work package descriptions and cost estimates for product bids, services ...

building recovery capabilities for critical services.You Have:8+ years of experience leading or advising on enterprise technology, resilience, cybersecurity, infrastructure, disaster recovery, business continuity, incident response, or crisis management disciplines for large, complex European or global organizationsExperience with advising executive stakeholders and leading senior-level advising or delivery … current capabilities, and developing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over timeExperience in a consulting or corporate advisory role, including with a top-tier consulting company, specialized cybersecurity ...

Sizewell C Limited is seeking an experienced Cyber Incident Response Lead to develop, manage, and coordinate the organisation’s cyber incident response capability within a highly regulated and safety-critical environment. You will lead preparation, detection, response, recovery, and lessons learned activities for cyber security ...

Google Cloud's Mandiant is seeking a Senior Incident Response Security Consultant (Mid) to lead advanced incident response engagements across cloud and on-prem environments. You will perform forensic analysis, threat hunting, and malware triage, guiding clients through investigations and containment with clear executive communication. Role ...

recovery. The successful candidate will correlate events across multiple data sources, produce detailed investigation reports, help improve detection coverage and playbooks, and participate in incident response exercises. Whats on offer £45,000£51,000 base salary Additional 25% shift premium Permanent position Exposure to complex incidents within … modern, security-sensitive environment Opportunity to develop incident response and threat analysis expertise Onsite London role operating across a 28-day shift pattern Company benefits package Excellent skill up and career progression opportunities What you need Experience within a SOC, incident response or threat analysis role ...

systems are protected from vulnerabilities, misconfigurations, and emerging threats. You’ll champion secure‐by‐design principles, automate security controls, and maintain strong monitoring and incident response practices. The role requires close collaboration with Developers, Cloud Engineers, Product Managers, and external suppliers. You will also contribute to the continuous … activities with engineering teams. Perform regular reviews of Terraform modules, container images, Helm charts, and AKS configurations to identify misconfigurations and risks. Monitoring, Detection & Incident Response Work with monitoring tooling (e.g., Datadog or Azure Monitor) to detect anomalous or suspicious activity. Maintain alerting rules, dashboards, and security signals ...

Management: Lead regular vulnerability scanning and penetration testing schedules; prioritise and oversee the remediation of technical weaknesses across all retail systems and POS terminals. Incident Response & Forensics: Act as the technical lead for all security incidents, managing the end-to-end response, from initial detection and containment … deep-dive forensic analysis and post-incident reporting. Identity & Access Management (IAM): Establish and enforce rigorous access controls and Multi-Factor Authentication (MFA) protocols to ensure only authorised personnel can access high-value client and financial data. Secure Software Development: Partner with the Digital/E-commerce teams ...

risk and lead the remediation of identified vulnerabilities across Lightsource bp's IT systems globally. You will be responsible for threat detection, investigation, and incident response, leveraging a modern security technology stack with a strong focus on the Microsoft Defender ecosystem. Working across multiple business areas and time … team Experience & Knowledge Required Experience: 5+ years of professional experience in cybersecurity, with at least 2+ years in a Security Operations Center (SOC) or incident response role Advanced proficiency with Microsoft Defender XDR and expert-level knowledge of Microsoft Sentinel, including KQL query writing and analytics rule development ...

oversight to cyber security operations and liaise with specialist technical teams. Coordinate threat intelligence and vulnerability management, remediation SLAs and external providers. Support incident response, crisis management, operational resilience, business continuity and IT disaster recovery, including AWS cloud environments. Support the Data Protection Officer with UK GDPR governance … GDPR, and awareness of FCA/PRA and payment scheme expectations. Sound understanding of the cyber threat landscape, threat intelligence, vulnerability management and incident/breach management, with the ability to interpret events and drive effective remediation. Working knowledge with security technologies and controls, including perimeter/edge security ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management.The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should be able … aligned to business risk.Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk.Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps.Translate technical findings into clear, business-relevant ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

will be part of the wider infrastructure team and work closely with development teams, clients, risk and compliance to drive security automation, threat detection, incident response, and risk reduction across the enterprise platform stack.Key ResponsibilitiesSecurity Leadership & Team Management: Lead a team of engineers, setting direction, managing workloads … well as vendor solutions & systems. Collaborate on implementing & Integrating security controls into pipelines including security scans, policy enforcement, and dependency checking. Security Monitoring & Incident Response: Monitor security alerts and events from SIEM, EDR, firewall, IDS/IPS, & other security tools. Triage and prioritise alerts based on severity ...

ASOS.com Ltd is seeking an experienced SOC and Incident Response Lead to provide hands-on technical leadership across security monitoring, detection, engineering, incident response and threat-led investigations. You will lead the SOC and IR team, coordinate with an external MSSP, and drive improvements in detection … incident handling. The role requires strong coaching, stakeholder management, and the ability to operate under pressure while guiding analysts through complex security findings #J-18808-Ljbffr ...

take ownership of the engineering, administration, health and continuous improvement of the security platforms, detection content and automation that underpin threat monitoring, detection and incident response across my client’s internal and managed customer environments. They will act as the final internal escalation point for complex and high … live incidents. Key Responsibilities Lead the end-to-end management of complex and high-severity security incidents, including investigation, containment, eradication, recovery and post-incident review. Conduct digital forensic investigations across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise ...

seeking a Senior SOC Analyst - Incident Response to lead complex security incidents in a large enterprise. You will own investigations end to end, coordinate multiple IT teams and apply structured incident response methodology using Microsoft Sentinel and Defender XDR. You will mentor junior analysts, develop playbooks ...

endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident Response SME support - Act as a Subject Matter Expert during security incidents, providing deep technical analysis and aiding remediation. Threat Intelligence integration - Integrate … Documentation - Maintain clear documentation for detection rules, hunting playbooks, and processes. 3+ years in a technical security role, such as detection engineering, threat hunting, incident response, or threat intelligence. Attacker Knowledge: Practical experience analysing attacker behavior, with a strong understanding and application of threat analysis models like MITRE ...

endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident Response SME support - Act as a Subject Matter Expert during security incidents, providing deep technical analysis and aiding remediation. Threat Intelligence integration - Integrate … Documentation - Maintain clear documentation for detection rules, hunting playbooks, and processes. 3+ years in a technical security role, such as detection engineering, threat hunting, incident response, or threat intelligence. Attacker Knowledge: Practical experience analysing attacker behavior, with a strong understanding and application of threat analysis models like MITRE ...

endpoint environments. Purple Team - Collaborate with our Adversarial Simulation team in Purple Team exercises to test, validate, and improve detection logic and response. Incident Response SME support - Act as a Subject Matter Expert during security incidents, providing deep technical analysis and aiding remediation. Threat Intelligence integration - Integrate … Maintain clear documentation for detection rules, hunting playbooks, and processes. Requirements 3+ years in a technical security role, such as detection engineering, threat hunting, incident response, or threat intelligence. Attacker Knowledge: Practical experience analysing attacker behaviour, with a strong understanding and application of threat analysis models like MITRE ...