426 to 450 of 2,296 Incident Response Jobs in the UK

their systems, networks and data. This is a hands-on position offering the opportunity to work across cyber security, infrastructure, cloud, threat detection and incident response within a small, technically capable IT team. The Role As Cyber Security & Infrastructure Engineer, you will be responsible for maintaining and improving … with internal teams and third-party suppliers to improve security, resilience and operational performance. Key Responsibilities Monitor security alerts, investigate potential incidents and lead incident response activities Conduct forensic investigations and contribute to threat detection and intelligence activities Develop and refine security monitoring, detection rules and use cases ...

Amazon EU SARL (UK Branch) is seeking technical Security Engineers for AWS Security Incident Response to learn rapidly and work in teams to keep customers secure. You will lead security response, explain concepts to non-technical audiences, and operate with AWS technologies at scale. Responsibilities include threat … triage, incident handling, and collaboration with partner teams, with on-call duties and commitment to continual learning and improvement of security controls. #J-18808-Ljbffr ...

containment design, so that the impact of any single compromise across autonomous, robotic and vessel systems is limited by design. Lead OT and vessel incident response, from identification through containment and recovery to post-incident review, in coordination with the wider Cyber team and vessel stakeholders. … Practised in applying IEC 62443 zones and conduits, or an equivalent OT security standard, to systems in service rather than on paper; Confident leading incident response in an operational environment, from identification through containment and recovery to post-incident review; Experienced in acting as the technical security ...

information security programmes. Ability to provide credible cyber security advice to both technical and non-technical stakeholders. Experience working across security architecture, cyber engineering, incident response or closely related cyber security disciplines. Strong understanding of information security controls, risk management and security governance principles. Excellent communication and presentation … solutions. Commitment to continuous professional development and staying current with evolving cyber threats and technologies. Experience in a cyber security architecture, senior engineering or incident response role. Professional certifications such as CISSP, CISM, C-CISO, CISA or equivalent industry-recognised accreditation. Experience delivering virtual CISO (vCISO) services. Experience ...

partnering with Software Engineering on larger changes. What you'll be doing Owning L2/L3 production issues end-to-end , from investigation and incident response through to resolution and RCA. Troubleshooting complex issues across applications, APIs, databases, cloud infrastructure and distributed systems . Reading, debugging and modifying … Automating repetitive support and operational processes. Supporting releases and deployments into production. Improving the reliability, resilience and performance of the platform. Working within structured incident, problem and change-management processes. Supporting customer-facing and internal teams with complex technical issues. Participating in a compensated out-of-hours on-call ...

keep the platform reliable, observable, governed and ready for controlled production use. Its emphasis is on platform health, support processes, quality assurance, release readiness, incident response and continual service improvement. The successful candidate will work closely with Architecture, Information Security, Service Delivery, Infrastructure, suppliers and consuming business teams … Manage incidents, problems, and service requests in line with established ITSM processes. Investigate and resolve operational issues, ensuring timely restoration of service. Support major incident response activities where platform services are impacted. Contribute to root cause analysis and implement actions to improve platform stability and reduce issue recurrence. ...

wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan 05-138, ISO 27001, NIST.Responsible for the completion … environments.Strong knowledge of classified information handling and secure communication protocols.Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems.Proven track record of leading incident response in high-security environments.Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST SP 800 series, ITAR, GDPR).Excellent leadership, stakeholder management ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques … application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data Ingestion … performance of the SIEM infrastructure. Security Engineering Contribute to security engineering projects, transitions, and transformations. Work closely with security operations and associated security incident response systems Stay informed about emerging threats and security best practices. Essential Skills/Experience Proven experience in SIEM Detection Engineering. Experience using cyber ...

Kingdom is seeking an Information Security Manager to own and run the 1st line security operations, including SIEM, EDR, vulnerability management, identity security and incident response. You will work alongside the Information Security Officer, manage MSSP relationships, lead incident response, drive threat hunting, and deliver the security ...

organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet … complex transition projects (e.g., insourcing, offshore in-shore). Operational familiarity with CREST, NIS2, DORA, and the EU AI Act. Hands-on experience leading incident response, threat hunting, and investigations. Broad technical knowledge across Windows, Linux, cloud, hybrid environments, firewalls, EDR/XDR, IDS/IPS, VPNs ...

organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet … complex transition projects (e.g., insourcing, offshore in-shore). Operational familiarity with CREST, NIS2, DORA, and the EU AI Act. Hands-on experience leading incident response, threat hunting, and investigations. Broad technical knowledge across Windows, Linux, cloud, hybrid environments, firewalls, EDR/XDR, IDS/IPS, VPNs ...

organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet … complex transition projects (e.g., insourcing, offshore in-shore). Operational familiarity with CREST, NIS2, DORA, and the EU AI Act. Hands-on experience leading incident response, threat hunting, and investigations. Broad technical knowledge across Windows, Linux, cloud, hybrid environments, firewalls, EDR/XDR, IDS/IPS, VPNs ...

Morgan in London is looking for a Security Operations Senior Associate to strengthen threat analysis and incident response across our cybersecurity program. You will detect, assess, and respond to threats, coordinating with cross-functional teams to improve security controls and awareness. The role requires hands-on experience with ...

Compliance & Assurance Support cybersecurity compliance activities aligned to UK and European regulatory frameworks. Maintain compliance documentation, evidence repositories, and control registers. Assist with security incident reporting processes and regulatory obligations. Monitor emerging guidance and regulations, assessing their impact on the business. Cyber Assessment Framework (CAF) Participate in assessments against … Monitor emerging cyber threats associated with AI and advance awareness across the organisation. Cybersecurity Operations Support security monitoring and vulnerability management activities. Assist with incident response and cyber risk assessments. Contribute to supplier and third-party security reviews. Support the development of security policies, standards, and awareness initiatives. ...

Requirements: 2-3+ years' SOC experience Strong hands-on experience with IBM QRadar SIEM Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations … Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill ...

root cause analysis, and implementation of corrective actions to maintain service reliability and security. Required Skills: * 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention ...

Data & Cyber team advises insurers and corporates on breach response, policy interpretation and multi-insurer claims, combining incident response with regulatory engagement. Based in Bristol, the Associate/Senior Associate role supports partners, supervises juniors, and handles complex cyber coverage matters, including ransomware scenarios, data privacy issues ...

Doist is seeking a Head of Cyber Defence and Incident Response to own the organisation’s cyber defence across a hybrid environment. You will monitor, detect, respond and recover, reporting to the CISO and guiding cyber defence operations including the MSSP. Focus areas include optimising tooling (SIEM, SOAR …/XDR, NDR), vulnerability management, and threat intel-driven prioritisation. You will drive threat and incident management with governance, metrics, and executive updates. #J-18808-Ljbffr ...

Unilever is seeking a Regional CERT Manager to lead cyber incident response across the region, combining strategic leadership with hands-on expertise to drive resilience. You will direct incident lifecycle activities, coordinate major investigations, and partner with SOC to enhance detection, monitoring and automation. You will mentor … incident response staff, report trends to leadership, and engage stakeholders across legal, risk and compliance to strengthen security postures. #J-18808-Ljbffr ...

security working group, setting priorities and driving resolution Translate threat intelligence into actionable engineering tasks and deliver monthly risk summaries to the ELT Vulnerability & Incident Management Own the full vulnerability lifecycle: discovery, triage, remediation, and reporting Coordinate incident response and set risk-based remediation timelines Security Tooling … classes (OWASP Top 10 and beyond) and practical experience with SAST, DAST, SCA, and secrets scanning tooling Proven end-to-end vulnerability management and incident response experience, including supply chain risk mitigation The ability to assess risk and make clear prioritisation calls, even with imperfect information A track ...

troubleshooting and resolution in line with SLAs Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams. Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post-mortem analysis. Serve as a dedicated Tier 3 escalation point … framework. Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs). Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities. Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB ...

root cause analysis, and implementation of corrective actions to maintain service reliability and security. Required Skills: 5+ years in Security Operations/SOC or Incident Response, including in a 24×7 or global environment. Proven experience across incident response, alert triage, threat hunting, data loss prevention ...

cloud environments using infrastructure as code and repeatable automation Improve production reliability through well-defined SLOs, graceful degradation, self-healing, automated recovery, and effective incident response Create self-service workflows and platform abstractions that reduce cognitive load and help R&D teams ship and operate software more effectively … networking Experience administering and scaling multi-tenant Kubernetes clusters and streaming platforms such as Kafka in production, including upgrades, workload isolation, reliability, security, and incident response Experience building and maintaining infrastructure as code, pipeline-as-code, containerization, and cloud-native systems using tools such as Terraform, Helm, Ansible ...