576 to 600 of 2,364 Incident Response Jobs in the UK

security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms … into threats across our cloud environments.Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response.Lead cloud security investigations and incident response activities in partnership with engineering teams.Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security ...

Provide engineering support for Citrix VDI environments and enterprise-scale identity and endpoint platforms.• Collaborate with cross functional teams to ensure service readiness, effective incident response, and continuous improvement.• Contribute to enterprise service engineering documentation, standards, and automation where applicable.Qualifications:Required: Active TS/SCI with PolyTanium platform … service environment.• Experience leading service transitions from on prem to Azure.• Strong documentation habits and ability to communicate complex technical issues clearly.• Familiarity with incident response, root cause analysis, and enterprise change management.• Relevant certifications: Microsoft, Citrix, Tanium, Splunk, or similar.This position is contingent on funding ...

standards across platform and application teamsLeveraging AI and AI assisted engineering to accelerate productivity and valueScaling and improving our telemetry backend systems and pipelinesImproving incident response with better telemetry coverageParticipating on the out of hours on-call rotationWho are we looking for The ideal candidate will have … debug and operate servicesDevOps tooling experience using tools such as Terraform, ArgoCD, Helm or JenkinsInterest in AI engineering and SRE practices to improve incident response and RCADesirable but not essential experience includes:Prometheus/PromQL, VictoriaMetrics, OpenSearch, Grafana or similar observability backendsAuto-instrumentation, distributed tracing, structured logging ...

security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms … across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during ...

Azure environments.You’ll work across servers, networks, storage, and security tools, contributing to infrastructure projects as well as cyber initiatives such as vulnerability management, incident response, and enhancing security controls. You’ll also collaborate with group security teams and help ensure systems remain resilient and up to date.Key … Tenable, Zscaler etc.)Palo Alto deployment/configuration experience is a mustGood understanding of firewalls, network protocols, and intrusion preventionAbility to manage vulnerability scanning, incident response, and remediationConfident communicator with solid documentation skillsThe role also covers an office in Milton Keynes and they might be occasional travel there ...

America and APAC, prioritizing intelligence streams and allocating resources for maximum impact. Your role enables secure business initiatives and strengthens our threat detection and response capabilities. You will help shape policies and frameworks that drive our cybersecurity strategy. We foster a collaborative and innovative environment where your leadership will … difference.Job Responsibilities:Identifies and assess complex global and industry-specific cyber threatsAnalyses cybersecurity intelligence and threat assessment data to inform risk managementPartners with incident response teams to share findings and collaborate on investigationsDevelops and implement operational plans and strategic projects for threat detection and responseEnsures alignment of threat ...

report threats that could impact people, information, systems and customers. You will transform complex data into actionable intelligence to support proactive cyber defence, incident response, vulnerability management and risk reduction across the organisation. Day-to-day, you will work with Security Operations, Incident Response and Security ...

maintain operational controls, including documented procedures, control testing and monitoring, exception management, and issue remediation with clear accountabilityManage operational risk, including operational resilience, incident response, business continuity readiness, and timely escalation of emerging issuesServe as the regional single point of contact for platform operational performance, owning intake … support consistent adoptionRequired Qualifications, Capabilities, and SkillsDemonstrated experience leading operational teams, including people management, performance management, and workforce planningProven experience managing operational risk, controls, incident response, and business continuity in a regulated environmentDemonstrated experience driving continuous improvement using structured methodologies such as root-cause analysis with measurable outcomesExperience ...

maintain operational controls, including documented procedures, control testing and monitoring, exception management, and issue remediation with clear accountability Manage operational risk, including operational resilience, incident response, business continuity readiness, and timely escalation of emerging issues Serve as the regional single point of contact for platform operational performance, owning … Required Qualifications, Capabilities, and Skills Demonstrated experience leading operational teams, including people management, performance management, and workforce planning Proven experience managing operational risk, controls, incident response, and business continuity in a regulated environment Demonstrated experience driving continuous improvement using structured methodologies such as root‐cause analysis with measurable ...

Kroll is seeking a Senior Associate for Digital Forensics and Incident Response in the United Kingdom. The role focuses on leading investigations into ransomware, data breaches, and insider threats, analysing forensic evidence across endpoints, networks, and cloud, and translating findings into actionable remediation for clients and senior stakeholders. ...

community and at external conferences and other events. You also work closely with other teams, helping ensure research supports real-world needs such as incident response, detection, and client delivery. Key Responsibilities Manage the Intelligence Production team’s day-to-day work, setting clear expectations, and balancing individual … intrusions, tooling, and campaigns) Strong experience communicating current and emerging threats, key trends, and potential impact to technical audiences and senior leadership. Experience supporting incident response, security operations, or similar environments Experience leading threat intelligence delivery, setting priorities, and managing workstreams based on business and operational requirements. Experience ...

maintain operational controls, including documented procedures, control testing and monitoring, exception management, and issue remediation with clear accountability Manage operational risk, including operational resilience, incident response, business continuity readiness, and timely escalation of emerging issues Serve as the regional single point of contact for platform operational performance, owning … Required Qualifications, Capabilities, and Skills Demonstrated experience leading operational teams, including people management, performance management, and workforce planning Proven experience managing operational risk, controls, incident response, and business continuity in a regulated environment Demonstrated experience driving continuous improvement using structured methodologies such as root-cause analysis with measurable ...

maintain operational controls, including documented procedures, control testing and monitoring, exception management, and issue remediation with clear accountability Manage operational risk, including operational resilience, incident response, business continuity readiness, and timely escalation of emerging issues Serve as the regional single point of contact for platform operational performance, owning … Required Qualifications, Capabilities, and Skills Demonstrated experience leading operational teams, including people management, performance management, and workforce planning Proven experience managing operational risk, controls, incident response, and business continuity in a regulated environment Demonstrated experience driving continuous improvement using structured methodologies such as root-cause analysis with measurable ...

seeking a DevSecOps Engineer to join our security-focused team in the United Kingdom. You will identify vulnerabilities, implement controls, monitor systems, and drive incident response across platforms. You’ll conduct threat modeling, review code for security issues, and help define policies and standards while applying OWASP ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive‐level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well‐defined cross‐region handoff processes Own end‐to‐end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white‐glove support for leadership Define and maintain SLAs and quality standards; track and report on ticket volume ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive‐level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well‐defined cross‐region handoff processes Own end‐to‐end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white‐glove support for leadership Define and maintain SLAs and quality standards; track and report on ticket volume ...

tooling, and platform improvements Hire and onboard engineers Run fair, well-calibrated performance reviews Establish and maintain engineering practices covering observability, testing, documentation, and incident response Ensure reliable, secure, and performant systems supporting panel engagement and data collection Represent the team’s work to Product and Engineering teams … Agile Methodologies Hard Skills Software Engineering Management Web Development Backend Systems Test Automation AI Tooling System Design Performance Reviews Technical Roadmapping Data Privacy Compliance Incident Response Soft Skills Clear Communication Stakeholder Engagement Mentoring Feedback Provision Career Development Support Certifications & Qualifications ISO 27001 Compliance Industry Keywords Data Privacy GDPR ...

agent visibility, governance, and risk platform Own service reliability by defining service health, instrumenting services, and acting on operational data Improve observability, alerting, and incident response practices Strengthen infrastructure, delivery pipelines, and automation, including infrastructure as code and repeatable deployments Respond to customer requests and unblock … Coding Ability In Python Fluent Coding Ability In TypeScript Fluent Coding Ability In Rust Experience With Infrastructure As Code Hard Skills Service Reliability Observability Incident Response Debugging Secure Software Development CI/CD Pipelines Containers Workflow Orchestration Operational Automation Production-Grade Software Projects Soft Skills High Ownership Adaptability ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive-level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well-defined cross-region handoff processesOwn end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white-glove support for leadershipDefine and maintain SLAs and quality standards; track and report on ticket volume, resolution time ...

experienced Cyber Security Lead to own and advance our security programme. You will implement and govern security controls, lead vulnerability management and coordinate incident response with stakeholders across the organisation. You will collaborate with procurement, legal, and operations to manage third‐party risk and drive security improvements that ...

Cyber Governance, Risk, and Compliance Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity, Incident Response, and Disaster Recovery. You will work closely with multiple teams across the IT department and the wider business to ensure that resilience strategies … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

drive business outcomes. Willingness to travel Fluency in English. Bonus Points: Hands‐on experience through delivering demos and POVs or in cybersecurity operations, incident response, digital forensics, or security‐focused AI infrastructure—providing the operational depth that elevates authored content beyond theoretical instruction. CrowdStrike Falcon certifications (e.g., CCFA … accommodation, please contact us at recruiting@crowdstrike.com for further assistance. , Bonus Points: Hands‐on experience through delivering demos and POVs or in cybersecurity operations, incident response, digital forensics, or security‐focused AI infrastructure—providing the operational depth that elevates authored content beyond theoretical instruction. CrowdStrike Falcon certifications (e.g. ...

full details.You will be responsible for: Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities.Data Integration and Transformation: Implement and manage the automated frameworks for integrating data … details. You will be responsible for Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities.Data Integration and Transformation: Implement and manage the automated frameworks for integrating data ...

mental wellbeingYou will be responsible for: Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities.Data Integration and Transformation: Implement and manage the automated frameworks for integrating data … wellbeing You will be responsible for Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities.Data Integration and Transformation: Implement and manage the automated frameworks for integrating data ...

required, showcasing platform capabilities to stakeholders. Work across various IRM modules such as Policy Management, Compliance & Audit Management, Vendor Management, Business Continuity Management, Vulnerability Response, Incident Response, and Security Dashboard. Assess existing IRM processes for maturity and identify automation opportunities on the ServiceNow platform. Apply knowledge ...