651 to 675 of 2,366 Incident Response Jobs in the UK

scale — sharding and replication, materialised views, merge and query optimisation, tenant isolation and cost/performance trade-offs. Owning SLOs, observability, capacity planning and incident response for data-intensive systems and pipelines, alongside the orchestration and job execution that power them. Shaping Data-as-a-Service … black box — and ideally have contributed code upstream. Reliability engineering for data platforms. You bring true SRE discipline — SLOs, observability, capacity planning and incident response — to analytical data systems and pipelines. Data-as-a-Service productisation. You think in terms of data as a product: secure, multi-tenant ...

similar security measures and monitoring.Review and generate technical specifications/documentationTranslate, create, and hand over network monitoring use cases and tread play books to incident response teamsAct as a mentor, technical lead and escalation point for other engineersMonitor and respond to incidentsKEY ACCOUNTABILITIESServe as an authority on Internet … Spam/malware/abuse.Experience in presenting findings and making recommendations to other operational teams.Experience in working with many collaborators to improve security and incident response both internal and external in an international community.Demonstrated ability in an ISP environment and Internet security arena.Experience with Internet organizations like ...

security measures and monitoring. Review and generate technical specifications/documentationTranslate, create, and hand over network monitoring use cases and tread play books to incident response teamsAct as a mentor, technical lead and escalation point for other engineersMonitor and respond to incidentsKEY ACCOUNTABILITIESServe as an authority on Internet … malware/abuse. Experience in presenting findings and making recommendations to other operational teams. Experience in working with many collaborators to improve security and incident response both internal and external in an international community. Demonstrated ability in an ISP environment and Internet security arena. Experience with Internet organizations ...

measures and monitoring.* Review and generate technical specifications/documentation* Translate, create, and hand over network monitoring use cases and tread play books to incident response teams* Act as a mentor, technical lead and escalation point for other engineers* Monitor and respond to incidents# # **KEY ACCOUNTABILITIES*** Serve … malware/abuse.* Experience in presenting findings and making recommendations to other operational teams.* Experience in working with many collaborators to improve security and incident response both internal and external in an international community.* Demonstrated ability in an ISP environment and Internet security arena.* Experience with Internet organizations ...

pipeline that scrapes data from physical infrastructure, the aggregation and storage layer, and the observability surfaces (logs, metrics, and traces) that enable fleet management, incident response, and alerting at scale. You partner daily with Fleet Software, Network Engineering, Data Centre Operations, and customer teams to make fleet health … Capture and prioritise new telemetry requirements as the fleet scales, working with engineering to extend coverage across new hardware, sites, and deployment types. Shadow incident reviews and site operations to turn recurring manual effort and visibility gaps into platform capabilities. Define and drive the metrics that matter: alert signal ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

take your career wherever you want it to go. Join EY and help to build a better working world. Director – DSO – UK Data Incident Investigations Strategic LeadAbout EY: At EY, we are committed to building a better working world. EY is looking to strengthen its enterprise data incident handling and investigation capability to improve consistency, speed and governance in suspected data incident triage and investigation. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edge security transformation programs and services. The opportunity: As a director, you will ...

delivery without ever compromising trust or resilience. This is a hands‐on, high‐impact role. You'll influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You'll define our standards, lead threat modelling, and champion secure‐by‐design practices across … primarily AWS).Application & infrastructure hardening: Implement secure coding practices, vulnerability management, secrets management and runtime protections for services and CI/CD pipelines. Detection & response: Build and maintain monitoring, logging and alerting for security events; lead incident response and post‐incident reviews to drive remediation ...

take your career wherever you want it to go. Join EY and help to build a better working world. Director – DSO – UK Data Incident Investigations Strategic Lead About EY: At EY, we are committed to building a better working world. EY is looking to strengthen its enterprise data incident handling and investigation capability to improve consistency, speed and governance in suspected data incident triage and investigation. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edgesecurity transformation programs and services. The opportunity: As a director, you will lead ...

hundred real tickets a month alongside a monthly patching cycle. The service runs inside the customer's own ServiceNow platform and their ITIL-aligned incident, request and change processes. You won't be introducing our tooling — you'll be making our delivery work well inside theirs, and evidencing that … named Service Delivery Manager, accountable for service governance, performance reporting and escalation Own attainment of the contracted service levels and KPIs, including incident response and resolution SLAs, patch compliance, backup and restore success, DR test compliance and repeat incident rate Manage the service credit regime — track exposure ...

identify potential attack vectors and security weaknesses.Support security strategy initiatives by providing intelligence-led insights and risk assessments.Collaborate with security teams to improve detection, response, and mitigation capabilities.Support incident investigations and provide intelligence to assist with response activities.Assist in the development and enhancement of security controls, processes … tactics, techniques, and procedures (TTPs).Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain.Experience investigating security events and supporting incident response activities.Strong analytical, investigative, and problem-solving skills.Ability to assess cyber risks and communicate findings clearly to stakeholders.Excellent written and verbal communication skills.Experience ...

velocity delivery without ever compromising trust or resilience.This is a hands‐on, high‐impact role. You’ll influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You’ll define our standards, lead threat modelling, and champion secure‐by‐design practices across … cloud (primarily AWS).Application & infrastructure hardening: Implement secure coding practices, vulnerability management, secrets management and runtime protections for services and CI/CD pipelines.Detection & response: Build and maintain monitoring, logging and alerting for security events; lead incident response and post‐incident reviews to drive remediation ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands-on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

attack vectors and security weaknesses. Support security strategy initiatives by providing intelligence-led insights and risk assessments. Collaborate with security teams to improve detection, response, and mitigation capabilities. Support incident investigations and provide intelligence to assist with response activities. Assist in the development and enhancement of security … techniques, and procedures (TTPs).Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain. Experience investigating security events and supporting incident response activities. Strong analytical, investigative, and problem-solving skills. Ability to assess cyber risks and communicate findings clearly to stakeholders. Excellent written ...

highly available cloud services. Support business stakeholders in adopting modern cloud-native architectures and security best practices. Develop and implement automation for security monitoring, incident response, remediation, and operational processes. Ensure cloud platforms comply with organisational security standards, governance requirements, and software development lifecycle practices. Identify, assess … gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions to standardise and automate cloud ...

DevOps teams to embed security into CI/CD pipelines. Lead the deployment of zero-trust architectures, security automation, and monitoring solutions. Support security incident detection, investigation, and response alongside the SOC and Red Team. Threat & Vulnerability Management Perform regular security assessments, vulnerability scans, and penetration tests, prioritizing … remediation efforts. Develop automated remediation for common security risks and misconfigurations. Monitor and analyze security logs and alerts, fine-tuning detections and response playbooks. Risk & Compliance Support Work with GRC and compliance teams to implement security controls aligned with ISO 27001, NIST, SOC 2, and GDPR. Support security reviews ...

looking for an experienced Cyber Security Analyst Tier 2 to join our Cyber Security Operations Centre (CSOC), providing advanced threat detection, investigation and response services while acting as an escalation point for our Tier 1 analysts. As a Tier 2 Cyber Security Analyst, you'll be a key member … continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor for Tier 1 analysts Conducting security ...

Participate in infrastructure projects, migrations and technology refresh programmes. Manage infrastructure security through appropriate change, configuration and release-management processes. Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery and the continuous improvement of incident readiness. Person Specification Qualifications Educated ...

Kubernetes (K8s) and container images.Triage, validate (including writing PoCs), and prioritize scanning tool findings.Communicate security issues to stakeholders and manage remediation throughout the SDLCIncident Response and ComplianceSupport product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.Apply Detection Engineering principles, setting baseline … security parameters and maintaining IDS/IPS rules.Conduct post-incident analysis and lessons learned and refine response strategies.Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer ...

container images. Triage, validate (including writing PoCs), and prioritize scanning tool findings. Communicate security issues to stakeholders and manage remediation throughout the SDLCIncident Response and ComplianceSupport product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks. Apply Detection Engineering principles, setting baseline … security parameters and maintaining IDS/IPS rules. Conduct post-incident analysis and lessons learned and refine response strategies. Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor's degree ...

principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud ...

/2027 , based in London on a hybrid model (around 60% on site) , and would suit someone who already has strong SOC/incident response experience and is looking to take the next step in a critical national environment. Why this role stands out Length & stability: Contract … environments to determine the nature and scope of incidents. Support and implement containment, eradication and recovery actions. Help coordinate incidents and contribute to post-incident reviews and lessons learned. Identify and support continuous improvements to incident investigation and response processes. Work closely with other Cyber Defence functions ...