2,376 to 2,400 of 2,428 Incident Response Jobs in the UK

do. The role participates in a rotating on-call rota and occasionally requires out-of-hours work to support deployments, maintenance or incident response. Key Responsibilities Database administration Install, configure, maintain and upgrade PostgreSQL and SQL Server environments across development, test and production Ensure database servers are securely configured ...

code reviews. Strong technical documentation skills. Deep understanding of large‐scale, highly available, multiuser, service‐based systems. Familiarity with on‐call rotations and incident response. What you will be doing Act as a point of escalation for the team both in and out of office hours. Lead the development ...

code reviews. Strong technical documentation skills. Deep understanding of large-scale, highly available, multiuser, service-based systems. Familiarity with on-call rotations and incident response. What you will be doing Act as a point of escalation for the team both in and out of office hours. Lead the development ...

code reviews. Strong technical documentation skills. Deep understanding of large-scale, highly available, multiuser, service-based systems. Familiarity with on-call rotations and incident response. Additional Information Act as a point of escalation for the team both in and out of office hours. Lead the development of scalable, maintainable ...

roadmaps and translate field insights into product improvements.Identify underutilized platform capabilities and incorporate them into migration roadmaps to increase customer throughput and adoption.Technical Expertise & Incident ResponseServe as a subject matter expert in at least one key domain: Marketing Cloud (Engagement/Intelligence), Data 360 (Data Cloud), Revenue Cloud ...

translate field insights into product improvements. Identify underutilized platform capabilities and incorporate them into migration roadmaps to increase customer throughput and adoption. Technical Expertise & Incident ResponseServe as a subject matter expert in at least one key domain: Marketing Cloud (Engagement/Intelligence), Data 360 (Data Cloud), Revenue Cloud ...

term solutions.Develop and implement self-healing automation for recurring failures. Service Operations & Support (Managed Services)Provide L2/L3 support aligned with ITIL practices (incident, problem, change management).Participate in on-call rotations and handle critical incident response.Maintain detailed SOPs, runbooks, knowledge base articles, and client documentation.Required Skills … Data WarehousingSQL skills for debugging, data validation, and optimizationExperience with Azure SQL DB, or SQL ServerFamiliarity with data modeling concepts and warehouse performance tuningSupport & Incident ManagementStrong troubleshooting and analytical skills for root cause analysisExposure to ITSM tools (e.g., ServiceNow, Jira)Preferred Qualifications:Microsoft Certifications (e.g. ...

performing IT operations, service delivery and project management team. Ensure the delivery of secure, reliable and customer-focused IT services. Oversee service desk operations, incident management and technology support. Drive cyber security operations, including vulnerability management, patching and incident response. Ensure ongoing compliance with ISO 27001 controls, policies ...

other security tools.Perform initial triage and analysis of security incidents.Escalate verified incidents to Tier 2/3 analysts as needed.Document incidents, investigations, and response actions in ticketing systems.Assist in the maintenance and tuning of SOC tools and technologies.Follow standard operating procedures (SOPs) for incident response.Participate in shift rotations ...

capacity planning, scaling strategies, and resource efficiency across large GPU-backed clusters.Partner with ML, platform, and software teams to establish clear production readiness standards.Incident Response & On-CallParticipate in a 24/7 on-call rotation as first-line response for cloud and cluster-related incidents.Lead incident triage … escalation, communications, and root cause analysis.Translate post-incident learning into durable architectural or automation improvements.Continuously reduce alert noise and recurring operational burden.Observability & Operational ExcellenceDesign and operate monitoring, logging, tracing, and alerting systems that enable rapid detection and recovery.Build dashboards that reflect real user-centric platform health (not just infrastructure ...

with will take you seriously because you've been in the same code they have.The scope is broad: application security, infrastructure security, detection and response, and the assurance work that keeps our certifications standing. You won't be covering it alone. The security team is seven people and growing … infrastructure and engineering teams: identify the signals worth collecting, write rules that catch real attacks without drowning us in noise, and build the response playbooks behind them.Incident Response -Lead security investigations into the production environment end to end, from first signal to root cause, across incidents and fraud. ...

Support to manage and support critical enterprise AI based applications in a fast-paced production environment. The role requires hands-on expertise in monitoring, incident management, troubleshooting, release support, and ensuring high availability and stability of business-critical platforms. In this role, youll make an impact in the following … analysis (RCA) for recurring issues and drive permanent fixes. Analyze production logs, identify failure patterns, and create actionable dashboards to improve service monitoring and incident response. Coordinate with development, infrastructure, database, network, and business teams for issue resolution. Support application deployments, change requests, weekend releases, and post-release validations. ...

controls aligned to ISO27001, Cyber Essentials Plus and the firm's wider data, AI and innovation strategies. Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response. Embedding security by design into projects, change and solution architecture, including identity ...

solutions. Develop and implement self‐healing automation for recurring failures. Service Operations & Support (Managed Services) Provide L2/L3 support aligned with ITIL practices (incident, problem, change management). Participate in on‐call rotations and handle critical incident response. Maintain detailed SOPs, runbooks, knowledge‐base articles, and client … debugging, data validation, and optimization; experience with Azure SQL DB or SQL Server; familiarity with data modeling concepts and warehouse performance tuning. Support & Incident Management – Strong troubleshooting and analytical skills for root cause analysis; exposure to ITSM tools such as ServiceNow and Jira. Preferred Qualifications Microsoft Certifications (e.g. ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

Cortex XDR, Illumio, Sentinel, Purview, Azure Responsibilities Implement and manage security controls, XDR, vulnerability management and PAM. Support threat hunting, security monitoring and incident response. Deliver cyber security projects and implement new security technologies. Support InfoSec compliance, risk management and security frameworks. Identify and respond to cyber threats … Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber Security Specialist, XDR, Cortex XDR, Illumio ...

planning and implementing appropriate security controls to ensure that the information within is kept secure.Key functions/outputs:1. Vulnerability Scanning & Reporting2. Endpoint Security3. Incident Management & Tickets4. System Hardening5. Change Work6. Participation in Regular Meetings7. DocumentationMain Objectives:Vulnerability Scanning & ReportingPerform regular vulnerability scans and generate reports utilising the below … Control: ensuring that access controls have been implemented correctly to only allow authorised users to gain access to certain data and systems.Incident Management & Tickets:Incident Identification: help to recognise and confirm potential incidents through alerts, logs and user reports. This includes distinguishing between true threats and false positives.Incident Response ...

guardrails for infrastructure, including Terraform modules, pipeline patterns, and observability practices. Owning end-to-end observability (logging, metrics, tracing, alerting, on-call) and driving incident response. Preparing the entire cloud estate for rigorous SOC 2 and ISO 27001 audits, and managing cloud cost at scale. What You Bring 7+ … technical direction. Experience designing Terraform modules and CI/CD pipelines that other engineers build on. End-to-end ownership of observability, including incident practice. Comfort with cloud networking (VPCs, private networking, DNS, load balancers, VPNs, firewalls) and provisioning production databases. Strong Python or Bash for automation. #J ...

centric risks, including supply chain attacks using tools for SBOM tracking, and targeting critical unpatched legacy infrastructure.Design, deploy, and operationalize AI Detection and Response (AIDR) solutions to protect proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction.Automate critical security workflows using … Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI.Execute regular offensive security operations, including AI Red Teaming and penetration testing of generative and agentic systems.Lead the defense against Shadow AI by developing and deploying AI access ...