251 to 275 of 651 Incident Response Jobs in the UK

comprehensive attack path reviews. You will build and maintain the platforms necessary for developing and deploying PoC exploits and validations, ensuring detection and response capabilities across cloud infrastructure. This engineering‐centric role requires deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will work closely with … Incident Response, Platform Engineering, and Security Architects to integrate security validation and defensive hardening into infrastructure and operational workflows. The role includes participation in a rotating on‐call schedule outside core business hours and weekends to support security incidents and critical operations. Responsibilities Design, develop, and maintain automation ...

Threat Detection Engineer to help transform its Security Operations capability. You'll be responsible for threat hunting, detection engineering, security automation and incident response, developing high-quality detections to protect a large enterprise environment. Key Responsibilities Proactive threat hunting across multiple data sources. Build and optimise detections using … . Develop automated detection and response playbooks. Lead technical security investigations and incident response. Improve monitoring capabilities and security operations. Work closely with infrastructure and technology teams to strengthen cyber resilience. Required Skills 3+ years in Threat Detection, Security Engineering or SOC. Strong threat hunting and detection engineering ...

path reviews. You will build and maintain the platforms necessary for developing and deploying proof-of-concept (PoC) exploits and validations, ensuring detection and response capabilities across cloud infrastructure. In this engineering-centric role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … will work closely with Incident Response, Platform Engineering and Security Architects to ensure that security validation and defensive hardening are seamlessly integrated into infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend ...

experience in cloud security, automation and security operations . Working within a collaborative cyber team, you'll help secure cloud environments, enhance detection and response capabilities, and drive automation across security processes. We're particularly interested in individuals who enjoy solving problems through automation, have experience integrating tools … security solutions, this role offers the opportunity to make a real impact. Key Responsibilities Design and implement security automation workflows to improve efficiency and response times. Develop scripts and integrations using Python, PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support ...

Security Analyst, youll act as a senior technical escalation point within the SOC, supporting the wider analyst team while leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity … work, candidates must have current SC clearance and be eligible to obtain UK Government DV clearance. What Youll Be Doing Lead the investigation and response to complex cyber security incidents across high-security customer environments Act as a senior escalation point for Tier 1 and Tier 2 analysts during ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud, and SOC teams … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

governance. Automation & CI/CD: Develop, maintain, and continuously improve automated tooling, configuration management, and CI/CD pipelines for building and deploying systems. Incident Management: Maintain 24x7 availability of production systems. Lead incident response, conduct post-mortem activities, identify root causes, and execute plans to permanently ...

that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security ...

that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security ...

/CD pipelines and policy‐as‐code guardrails. Leverage AI agents extensively to automate and optimise platform work—provisioning, cost and performance optimisation, incident response, remediation and documentation. Prepare the infrastructure for AI agents as first‐class “engineers”: safe machine identities, scoped permissions, sandboxes, approval workflows and audit … agent identities; secure by default, least privilege, secrets management and continuous compliance. Apply SRE practices—SLOs/SLIs, observability, capacity planning, resilience and blameless incident management—to keep the platform reliable and cost‐efficient. Partner with data engineering to design and optimise data pipelines, data stores and large‐scale ...

across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. … Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands‐on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence ...

event-driven workflows. Automation & Toil Reduction at Scale Lead the design of automation frameworks that eliminate manual operational tasks across multiple domains. Translate incident learnings and operational inefficiencies into scalable automation and preventative controls. Drive adoption of automation-first principles, reducing dependency on human-driven processes. Contribute … telemetry, monitoring, alerting, and operational visibility across all critical systems. Ensure services are observable, measurable, and support proactive detection of issues. Improve operational readiness, incident response effectiveness, and time-to-recovery through engineering solutions. CI/CD & Platform Integration Contribute to the design of CI/CD patterns ...

enable efficient and reliable software delivery. Work closely with development teams to improve platform resilience, scalability, and operational performance. Implement monitoring, alerting, and incident response processes to support production systems. Drive automation initiatives to reduce operational overhead and improve system reliability. We're Looking For: Proven experience … using FastAPI . Strong knowledge of Terraform and Infrastructure as Code principles. Experience designing highly available, resilient, and secure cloud environments. Strong troubleshooting and incident management skills within production environments. Experience with CI/CD pipelines, Git, GitHub, and DevOps best practices . Strong understanding of cloud networking concepts ...

risks, influencing product strategy, and serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging … management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident ...

ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee … programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have been working ...

Group Policy environments in line with recognised security standards. Apply CIS Benchmarks, STIGs and other system-hardening standards. Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security. Contribute to vulnerability management, root-cause analysis and remediation activity. Support security controls across VMware Cloud … Benchmarks or similar hardening standards. Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture. Experience with vulnerability management, SIEM, logging and incident response. Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity. Experience with Elastic Stack or Elastic Security would be highly advantageous. Exposure ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed a security-aware culture.* Manage security incident response planning and coordinate with Security Operations Centre (SOC).* Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP).* Excellent communication skills, able to convey complex security topics to non-technical stakeholders.* Pragmatic, calm, and resilient under pressure during incident management.**Why Join Us?** Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies ...

compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed a security-aware culture.* Manage security incident response planning and coordinate with Security Operations Centre (SOC).* Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP).* Excellent communication skills, able to convey complex security topics to non-technical stakeholders.* Pragmatic, calm, and resilient under pressure during incident management.Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute ...

core application to remain safe, performant, and fit for future needs. Communicate clearly with stakeholders, translating technical complexity into shared understanding. Support production incident management, debugging, monitoring, and continuous improvement. Embrace agile methodologies, user‐centred thinking, and a pragmatic approach to solving real business and engineering problems. Participate … data volume. Experience improving reliability, scalability, observability, and operational maturity in production systems. Experience in a DevOps culture: CI/CD pipelines, observability, incident response, and production ownership. Experience with platform capabilities supporting other engineering teams (shared services, deployment tooling, infrastructure abstractions, or internal developer workflows). ...

design conversations, code review, and pairing in a fully remote setup. Participate in on-call (EMEA rotation) for the services you build, and treat incident response and post-incident learning as part of the craft. Contribute to open source. Pyroscope is OSS. You will engage the community … funded usage budget so you can iterate quickly without unnecessary friction. We encourage pragmatic AI-assisted development: faster prototyping, test generation, refactors, documentation, and incident follow-ups, always paired with strong code review and quality standards. You'll also have access to frontier models (e.g., GPT-5.6, Claude Fable ...

upgrades, digital transformation, operational changes and AI rollouts. Identify and address legal and regulatory considerations across privacy, digital, cybersecurity and outsourcing domains. Cybersecurity & Incident Response Advise on cybersecurity legal obligations and internal policies. Support breach response, regulatory notifications, client communications and incident remediation. Lead on legal … dedicated line designed exclusively to assist job seekers with disabilities to apply online. Only messages left for this purpose will be considered. A response to your request may take up to two business days. #J-18808-Ljbffr ...

overall Digital Workplace product strategy and control environment* Manage a team of Digital Workplace Professionals and Engineers to oversee day-to-day operations, incident response, and automation, reducing downtime and operational bottlenecks* Accountable for ensuring that sufficient capacity is available to accommodate expected growth in all managed Digital … unusual and complex problems* Familiar with the specific standards associated with an IT practitioner’s current role: e.g. Health and safety standards; change management; incident management and problem management standards; and common service focused frameworks such as ITIL Version 3**SKILLS AND EXPERIENCE****Functional/Technical Competencies:**Essential:* Strong ...

mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR). Establish, implement, and maintain security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps ...