326 to 350 of 648 Incident Response Jobs in the UK

Gather and document operational requirements centred around contractual compliance, business needs and industry best practice. Utilise these requirements to design appropriate monitoring, alerting and incident response practices. Identify and implement automation candidates to further maximise the efficiency of the teams. Ensure 24/7/365 operational stability ...

automation frameworks, and database‐as‐code practices using Redgate Flyway. Take ownership of critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate closely with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure‐by‐design, compliance ...

availability of the cloud platforms andservices you build. Implement robust monitoring, alerting, and loggingsolutions, and participate in on-call rotations to ensure rapid incidentresponse and resolution. Security & Compliance: Implement and enforce cloud security best practices, ensuring compliancewith Citi's policies, industry standards, and regulatory requirements.Configure IAM roles, network security groups ...

ensuring compliance with ISO27001, GDPR, PCI DSS and other regulatory standards. Drive a proactive approach to cyber security, risk management, audits, vulnerability management and incident response. Lead and develop the Data & Development team responsible for in‐house web systems, development planning, testing and data provisioning. Champion secure software development ...

automation frameworks, and database-as-code practices using Redgate Flyway. Take ownership of critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate closely with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure-by-design, compliance ...

development and delivery of an organisation-wide Insider Risk Programme. Plan, coordinate and deliver personnel security risk assessments. Conduct people security investigations, post-incident reviews and implement lessons learned. Develop and maintain people security incident response policies, plans and procedures. Support physical security activities where required, including ...

resolution on complex technical tickets across the SaaS platform. Writing and troubleshooting complex SQL queries. Debugging across a range of programming languages. Leading critical incident response and post-incident reviews. Managing, coaching and developing 4-5 senior technical staff. Providing technical insight into Product and Engineering teams ...

ensuring the stability, availability and performance of critical banking and payment systems. You'll act as a senior technical escalation point, lead major incident response and help shape the future of operational tooling and automation. Key responsibilities include: Leading technical response during major incidents and coordinating service … another enterprise scheduling platform. SQL Server administration, troubleshooting and performance tuning. Windows Server environments. PowerShell scripting. SFTP. Azure DevOps. ITIL/ITSM practices. Major Incident Management within a production support environment. Automation and operational improvement initiatives Contact: Zach Bennett - CPS Group By applying to this advert you are giving ...

security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it. Detection, Response & SOC Partnership Own the strategic relationship with our 24/7 outsourced SOC holding them to a high standard on threat hunting, threat intelligence utilisation … automated response, not just SLA compliance. Ensure Cognism has a holistic, well‐maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves. Build the internal team into a trusted escalation layer, with clear incident response playbooks, rehearsed escalation paths, and a feedback ...

platform optimisation Designing and implementing endpoint security controls Integrating CrowdStrike with technologies including Active Directory, ServiceNow, SIEM and SOAR platforms Developing detection rules, response workflows and security policies Supporting threat hunting and improving endpoint visibility Working across Windows server, desktop and cloud workloads Providing technical expertise throughout implementation … experience with: Enterprise deployment of CrowdStrike Falcon Falcon sensor rollout and lifecycle management Policy creation and tuning Host groups, prevention policies and detection management Incident response and threat hunting using CrowdStrike Falcon Complete, Falcon Insight or Falcon Prevent Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms ...

ownership of technical operations across all sites and installations Ensure all CCTV (fixed, temporary, deployable) is correctly configured and monitored Lead technical fault escalation, incident response, and post-incident review Own the group’s technology roadmap and future platform strategy ARC Leadership Set and enforce ARC performance … standards (response times, accuracy, false alarm rates) Own the 24/7 escalation structure and operational authority levels Work with the ARC Manager on staffing, shift design, and coverage Ensure continuous NSI Gold compliance Compliance & Certification Lead the group’s ISO 9001 programme and scope additional certifications Maintain ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

This person will own the platform foundations Sanity engineers build on every day: cloud infrastructure, Kubernetes, networking, routing, observability, CI/CD, deployment paths, incident response, and the standards that make production ownership work across product teams. The scale is real. Content Lake alone handles around … line between Platform and SRE. Platform should own the shared foundations. SRE should help product teams run services well, with strong tooling, standards, and incident support. Raise the reliability bar across Sanity's production systems, including dashboards, alert severity, paging standards, service ownership, on‐call readiness, and incident ...

guides, playbooks, and internal tech talks. Serve as a first responder during on-call rotations for core infrastructure, lead root cause analysis, and drive incident mitigation and follow-through. Drive team-wide quality objectives for the Infrastructure platform: reliability, operational readiness (alerting, dashboards, runbooks), and developer experience/productivity … such as GitHub Actions) and the ability to weigh trade-offs between them for a given problem. Solid understanding of SRE principles, including incident response, fault-tolerant architecture, and capacity planning. Experience unblocking and mentoring other engineers (e.g. code/design reviews, knowledge sharing, or driving best practices ...

JPMorgan Chase & Co. in the United Kingdom seeks a Lead Software Engineer focused on Site Reliability and Operations Excellence to strengthen incident response, drive reliability standards, and guide durable improvements across a complex technology stack. You will own the incident management lifecycle, serve as Incident Commander ...

around 25 through a period of genuine transformation. What you'll be doing: Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scale Build and govern an internationalised … manage the Technology Resilience framework, including business impact analysis, Disaster Recovery exercises (cyber-attack, ransomware, infrastructure failure scenarios) and Business Continuity Plans Lead major incident response and postmortem/root cause processes, driving a culture that reduces repeat incidents and strengthens proactive problem management Own the Change Advisory ...

around 25 through a period of genuine transformation. What you'll be doing: Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scale Build and govern an internationalised … manage the Technology Resilience framework, including business impact analysis, Disaster Recovery exercises (cyber-attack, ransomware, infrastructure failure scenarios) and Business Continuity Plans Lead major incident response and postmortem/root cause processes, driving a culture that reduces repeat incidents and strengthens proactive problem management Own the Change Advisory ...

CISSP/CISM, ISO27001, NIST) Proven stakeholder influence with senior business/technology leaders Cloud expertise (Azure/AWS/GCP) + network, encryption, incident response Package Competitive salary + bonus + healthcare + pension + 27 days holiday Rates depend on experience and client requirements. #J ...

Around 1+ year's commercial experience within cyber security or a SOC environment Good understanding of networking, operating systems and security fundamentals Exposure to incident response and security monitoring Experience with any SIEM platform (Microsoft Sentinel, Splunk, Microsoft Defender, QRadar, Elastic etc.) Strong communication skills What ...

experience with, developing productive and trusting relationships with individuals across Government and industry. Desirable Experience working in a cyber security, security operations, or incident response environment. Relevant professional qualifications or training in intelligence analysis or cyber security. The resilience to manage multiple projects concurrently, with the ability ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience, backup, and disaster recovery architecture patterns and standards Collaborate with Legal, Procurement, and Commercial teams to ensure governance and contractual controls ...

likely have experience with several of the following: Microsoft security technologies including Defender, Entra ID, Intune and Microsoft 365 Security. Security Operations, Incident Response and Vulnerability Management. Identity & Access Management and privileged access controls. Endpoint security, device management and secure configuration. Windows Server, networking, cloud technologies and enterprise ...