451 to 475 of 2,296 Incident Response Jobs in the UK

seeking a Senior SOC Analyst - Incident Response to lead complex, high-severity investigations across a large enterprise. You will own investigations end-to-end, shape critical response decisions and strengthen detection, containment and lessons across the organisation. Reporting to the SOC Manager, you will mentor junior analysts ...

Must have 2+ years in Pre-Sales or similar role within an MSP/Reseller organisation Previous experience being part of or working with incident response teams would be beneficial Good understanding of incident response stages and handling preferred Knowledge and/or experience using endpoint ...

corporate IT environment Support vulnerability remediation, endpoint security and technical cyber security controls Take an active role in security monitoring, vulnerability management and incident response Support the development of internal security operations capability as the UK IT function matures Contribute to the design and implementation of secure … with endpoint security, vulnerability remediation and patch‐management tooling Good understanding of cloud platforms, particularly Microsoft Azure Experience with security monitoring, vulnerability management or incident response Familiarity with SIEM, EDR/XDR or SOC tooling Strong troubleshooting, documentation and communication skills Qualifications Relevant degree, technical qualification, apprenticeship ...

corporate IT environment Support vulnerability remediation, endpoint security and technical cyber security controls Take an active role in security monitoring, vulnerability management and incident response Support the development of internal security operations capability as the UK IT function matures Contribute to the design and implementation of secure … with endpoint security, vulnerability remediation and patch-management tooling Good understanding of cloud platforms, particularly Microsoft Azure Experience with security monitoring, vulnerability management or incident response Familiarity with SIEM, EDR/XDR or SOC tooling Strong troubleshooting, documentation and communication skills Qualifications Relevant degree, technical qualification, apprenticeship ...

慨正橡扯 is seeking a SOC Shift Lead to oversee incident investigation and analysis in London. This role involves leading teams in responding to high-severity incidents and mentoring analysts. The ideal candidate will possess 7–10 years of experience in SOC or Incident Response and hold ...

role you will be responsible for monitoring the threat landscape, analysing emerging risks, and delivering timely intelligence that supports Security Operations Centre (SOC) activities, incident response, threat hunting, detection engineering, risk management and the wider business. You will assess adversary tactics, techniques and procedures (TTPs), develop intelligence … aligned to real-world adversary tradecraft. You will help transform intelligence into actionable decisions, strengthen monitoring capabilities and drive improvement across the detection and response lifecycle. There will also be the chance to research new and specialist techniques, working cross industry, and helping to shape our OT LAB.You will ...

role you will be responsible for monitoring the threat landscape, analysing emerging risks, and delivering timely intelligence that supports Security Operations Centre (SOC) activities, incident response, threat hunting, detection engineering, risk management and the wider business. You will assess adversary tactics, techniques and procedures (TTPs), develop intelligence … aligned to real-world adversary tradecraft. You will help transform intelligence into actionable decisions, strengthen monitoring capabilities and drive improvement across the detection and response lifecycle. There will also be the chance to research new and specialist techniques, working cross industry, and helping to shape our OT LAB. ...

purple team events.Review and develop security operations center dashboards for anomalous activity.Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc.Minimum qualifications:Bachelor's degree or equivalent practical experience.Completed relevant industry course/certification offerings such … more programming languages.Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.Preferred qualifications:Security+ or similar Cyber Security/Incident Response related certifications.Experience responding to security incidents on Kubernetes.Experience analyzing, triaging, and remediating common information security incidents.Understanding of common attacker tactics, tools, and techniques.Excellent problem ...

teams (client networking and virtualization) to support infrastructure projects and support issues. Participate in out-of-hours on-call rota, providing operational support and incident response outside of standard business hours Provide networking expertise to support virtualization platforms, including: VMware vSphere/ESXi Microsoft Hyper-V Nutanix Participate … network architecture reviews, capacity planning, and performance tuning Create and maintain technical documentation, network diagrams, and operational procedures Support change management, incident response, and root cause analysis Work effectively as part of a global, remote team, including occasional out-of-hours support if required. Required Skills & Experience CCNA ...

Aggreko in Glasgow is seeking a Security Operations Team Lead to steer a global security operations function, drive incident response, and lead strategic security initiatives across the organisation. You will manage agile teams, align with ISO27001, Cyber Essentials Plus, NIS-2 and SOX audits, and hands ...

Methods is seeking a Senior Cyber Analyst to lead complex investigations and incident response, providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI.This is a technically demanding role that combines proactive security ownership with infrastructure delivery. … capabilities.This role is office-based and requires five days per week on-site presence.Key ResponsibilitiesLead the firm's security operations function, owning threat detection, incident response, and vulnerability management end-to-endMonitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

tools and agents we build or deploy, including non-human identitiesAdvise on safe adoption of AI coding and agentic tools across engineeringCompliance and incident responseWork with GRC to translate regulatory and compliance requirements (e.g. SOC 2, ISO 27001) into concrete technical controlsLead or support incident response … modelling and architectural security reviewDeep understanding of common attack vectors and application/infrastructure vulnerabilities (e.g. OWASP Top 10)A thorough understanding of the incident response process and Zero Trust architecture principlesExperience managing penetration testing engagements and working with engineering on remediationComfortable reading and writing code (Python ...

gapsSupport OPCOs in implementing security controls, standards, and procedures in accordance with GCG’s cybersecurity requirementsProvide guidance on cybersecurity governance, risk management, vulnerability management, incident response, data protection, identity and access management, and third-party risk managementDevelop SOPs, templates, checklists, and guidance documents to support consistent adoption … including NIST CSF, CIS Controls, ISO 27001, and risk management principlesDemonstrated experience assessing and improving cybersecurity maturity programsKnowledge of security governance, compliance, vulnerability management, incident response, identity and access management, and data protectionStrong analytical and problem-solving capabilities with the ability to translate technical risks into business impactAbility ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

that align strategies and business objectives to ensure that our clients can maintain operational continuity. You will ensure compliance with relevant regulations, plan client incident response and recovery, and manage resilience projects.Responsibilities:Develop and implement comprehensive cyber resilience strategies to ensure the organization's ability to anticipate, withstand … from cyber incidents.Design and deploy resilience solutions that integrate with existing security frameworks and address key areas such as business continuity, disaster recovery, and incident response.Conduct detailed risk assessments to identify vulnerabilities and threats, and implement strategies to mitigate these risks and strengthen overall resilience.Advise clients on best practices ...

Experienced building detection rules (SIEM, EDR, or cloud-native tooling) Deep understanding of attack patterns (MITRE ATT&CK framework) SOC operations, threat analysis, or incident response Datadog & Cloud Monitoring Hands-on Datadog OR equivalent Sentinel/SIEM experience Azure Monitor and Log Analytics familiarity GCP Cloud Logging … similar) Security & Compliance Knowledge of financial services threats (insider threats, data theft, credential abuse) Understanding of regulatory requirements (DORA, FCA, SOC2) Familiarity with incident response frameworks Comfortable in 24/7 on-call environment during integration crisis period Ideal candidate: Seasoned Security engineer who can operate independently Experience ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Produce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operations … Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security ...

that align strategies and business objectives to ensure that our clients can maintain operational continuity. You will ensure compliance with relevant regulations, plan client incident response and recovery, and manage resilience projects. Responsibilities: Develop and implement comprehensive cyber resilience strategies to ensure the organization's ability to anticipate … cyber incidents. Design and deploy resilience solutions that integrate with existing security frameworks and address key areas such as business continuity, disaster recovery, and incident response. Conduct detailed risk assessments to identify vulnerabilities and threats, and implement strategies to mitigate these risks and strengthen overall resilience. Advise clients ...

Datadog, and safe release practices Oversee database and schema evolution practices - migrations, data integrity, and performance - in partnership with platform and infrastructure teams Lead incident response for backend-owned systems - triage, escalation, post-incident reviews, and runbook quality Mentor engineers on PHP (Yii/Yii2), Go, Security … platform operations - with solid breadth across design, build, test, and run Track record of owning production systems end-to-end: implementation, rollout, monitoring, incident response, and follow-up Experience leading technical delivery on complex, ambiguous initiatives involving multiple engineers, dependencies, or teams Strong architectural judgement - evaluating trade-offs ...

availability of easyJet's information and information systems through effective security engineering, tooling and technical controls.Working closely with colleagues across Technology, Security Operations and Incident Response, you'll help ensure our security services remain resilient, effective and ready to support the evolving needs of the business.THE ROLEAs … vulnerability remediation and security control improvement activities.Producing and maintaining technical documentation, runbooks and operational guidance.Supporting security investigations and remediation activities alongside Security Operations and Incident Response teams.Providing security-focused technical support and consultancy to Technology teams across the business.Contributing to the development and delivery of the security engineering ...

Overview Monitor and manage IT security infrastructure Conduct vulnerability assessments and penetration tests Lead incident response and mitigation Implement security policies and procedures Ensure compliance with GDPR, ISO27001 Work with SIEM tools for threat detection Manage access controls and firewalls Oversee employee security awareness programs Respond to emerging ...

easyJet's information and information systems through effective security engineering, tooling and technical controls. Working closely with colleagues across Technology, Security Operations and Incident Response, you'll help ensure our security services remain resilient, effective and ready to support the evolving needs of the business. THE ROLE … security control improvement activities. Producing and maintaining technical documentation, runbooks and operational guidance. Supporting security investigations and remediation activities alongside Security Operations and Incident Response teams. Providing security-focused technical support and consultancy to Technology teams across the business. Contributing to the development and delivery of the security ...

judgment calls and iterating with stakeholders rather than waiting for perfect clarity.Mentor and coach junior engineers, promoting best practices in code quality, data architecture, incident response, and operational excellence.Participate in architectural decisions and long-term strategy planning for our enterprise-wide data infrastructure, with a focus on cost … modern data stack.Deep knowledge of Snowflake data warehouse design, optimization, and cost modeling.Experience owning production systems, including on-call rotations (e.g., PagerDuty, Opsgenie), incident response, and postmortem processes.Strong understanding of data architecture concepts, including data lakes, event-driven architectures (e.g., Kafka), ETL/ELT, and data mesh.Proficiency with ...