76 to 100 of 309 Incident Response Jobs in the UK

cyber security strategy and roadmap. Own and continuously improve ISO 27001 and Cyber Essentials Plus. Lead security operations and manage an outsourced SOC. Oversee incident response, vulnerability management and remediation. Manage external security partners and specialist suppliers. Lead and mentor the Information Security team. Work closely with senior … Proven experience owning and improving ISO 27001 and security governance. Experience managing outsourced SOC and security partners. Strong knowledge of security operations, threat detection, incident response and vulnerability management. Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture. This is a senior leadership opportunity ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

security and reducing organisational risk through proactive security engineering. This is not a traditional SOC position. Whilst you'll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud platforms. What … governance controls using Microsoft Purview Work closely with infrastructure, cloud and project teams to embed security into new and existing technology solutions Contribute to incident response activities and ongoing improvements to detection capabilities Provide technical security guidance to both technical and non-technical stakeholders Support compliance against recognised ...

controlled deployment and rollback processes - Implement strong IAM, networking, service account, secrets management, encryption and least-privilege controls - Establish centralised logging, monitoring, alerting and incident response processes - Design and test backup, disaster recovery and business continuity arrangements, including appropriate RPO and RTO targets - Support secure operation of scheduled … managed database services - Strong experience of CI/CD, ideally using GitHub Actions, together with Docker and containerised workloads - Sound understanding of monitoring, incident response, backup, disaster recovery, threat modelling and secure software delivery - Experience within fintech, banking, payments, accounting software, payroll or another regulated environment would ...

Manage and coach a small team of Information Security professionals. Manage and drive effective performance of multiple security vendor partners. Own and enhance security incident response processes and recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including … will need: Proven experience leading a Cyber Security, Cyber Defence or Information Security function within a complex organisation. Strong knowledge of security operations, incident response, risk management and security governance. Experience developing and implementing security policies, controls and security improvement programmes. Excellent stakeholder management and communication skills, with ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

central London. Responsibilities: Providing effective leadership to the Cyber Security team, focusing on individual performance and development Overall responsibility for threat monitoring, detection and response Acting as a point of escalation for complex security issues Ensuring triage of all security alerts and that there is thorough investigation and timely … firm security standards Maintaining SIEM tools, including their detection rules Oversight of vulnerability management across the firm Providing calm and effective leadership on security incident response activities Working closely with senior stakeholders both within security and IT and across the business Key skills required: 5+ years experience ...

central London. Responsibilities: Providing effective leadership to the Cyber Security team, focusing on individual performance and development Overall responsibility for threat monitoring, detection and response Acting as a point of escalation for complex security issues Ensuring triage of all security alerts and that there is thorough investigation and timely … firm security standards Maintaining SIEM tools, including their detection rules Oversight of vulnerability management across the firm Providing calm and effective leadership on security incident response activities Working closely with senior stakeholders both within security and IT and across the business Key skills required: 5+ years' experience ...

Entra ID, Sentinel, Microsoft Defender and Defender for Cloud. CrowdStrike: Proven design experience across endpoint and identity security. Security Operations: Monitoring, telemetry, vulnerability management, incident response, threat modelling and security controls. Governance & Compliance Delivery: Experience in smaller, fast-paced organisations, working with internal teams and external partners. … technical right hand to the Cyber lead, driving hands-on security architecture and delivery. You'll take ownership of monitoring, vulnerability remediation, incident response and security controls across Azure, using Microsoft Security technologies including Entra ID and Sentinel, alongside CrowdStrike.Working with architecture and platform teams, you'll ensure ...

tools such as Dynatrace and Google Cloud Operations. Conduct technical design reviews, code reviews, production-readiness reviews, and post-implementation validation. Provide production support, incident response and root-cause analysis for the API platform and customer services. Ensure that solutions meet security, control, resilience and operational-readiness requirements. … enterprise tooling. Strong understanding of GCP networking, DNS, IAM, service accounts, TLS, private connectivity, load balancing and troubleshooting. Experience supporting production services, including monitoring, incident response, root-cause analysis, rollback and post-change validation. Strong Linux skills and practical Scripting or development experience using Python, Bash, JavaScript, Node.js ...

tools such as Dynatrace and Google Cloud Operations. Conduct technical design reviews, code reviews, production-readiness reviews and post-implementation validation. Provide production support, incident response and root-cause analysis for the API platform and customer services. Ensure that solutions meet security, control, resilience and operational-readiness requirements. … enterprise tooling. Strong understanding of GCP networking, DNS, IAM, service accounts, TLS, private connectivity, load balancing and troubleshooting. Experience supporting production services, including monitoring, incident response, root-cause analysis, rollback and post-change validation. Strong Linux skills and practical Scripting or development experience using Python, Bash, JavaScript, Node.js ...

tools such as Dynatrace and Google Cloud Operations. Conduct technical design reviews, code reviews, production-readiness reviews and post-implementation validation. Provide production support, incident response and root-cause analysis for the API platform and customer services. Ensure that solutions meet security, control, resilience and operational-readiness requirements. … enterprise tooling. Strong understanding of GCP networking, DNS, IAM, service accounts, TLS, private connectivity, load balancing and troubleshooting. Experience supporting production services, including monitoring, incident response, root-cause analysis, rollback and post-change validation. Strong Linux skills and practical scripting or development experience using Python, Bash, JavaScript, Node.js ...

Cyber Governance, Risk, and Compliance Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity, Incident Response, and Disaster Recovery. You will work closely with multiple teams across the IT department and the wider business to ensure that resilience strategies … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

investigating and responding to threats while strengthening the controls that protect our systems, networks and data. Your responsibilities will span security monitoring, risk review, incident response and liaison with local and national partners. You will also contribute to the wider ICT service, including Microsoft 365 administration, infrastructure updates … Security Analyst - Key Responsibilities: - Monitor security systems, identify and investigate cyber threats, and respond to incidents while maintaining clear documentation and up-to-date incident response procedures - Design, implement, maintain and monitor security measures across systems and networks, including firewalls, intrusion detection, anti-virus, authentication, log management ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive ...

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...

Systems, covering all aspects of system security and resilience including strategy, policies, standards, compliance and assurance across the business. You will manage risk, support incident response and investigations, and work closely with the Cyber Security Manager. If you have the relevant experience (please see below) and are looking … cyber security policies and procedures. Conducting regular risk assessments, audits and testing to identify vulnerabilities and document improvements. Supporting the Cyber Security Manager with incident response and investigations into security breaches. Coordinating Management of Change activities and engineering risk assessments, and carrying out technical RCA investigations. Managing control ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...