76 to 100 of 642 Incident Response Jobs in the UK

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … solve will matter. Does this sound like you? You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on‐call and incident response practices, and post‐incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation‐first ...

Developer Empowerment: Building and maintaining 'golden path' templates for secure service deployment, enabling feature teams to confidently and safely push code without compromising security. Incident Response: Contributing expertise to the security incident response team, helping to swiftly and effectively manage and resolve security events. What ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self‐healing workflows, and resilience engineering. Use enterprise‐authorized AI capabilities within the work environment to accelerate major‐incident triage, troubleshooting, and post‐incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Lead reuse‐first adoption ...

scale security capabilities that protect the UK's largest digital bank. You'll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high‐performing team, you'll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat‐led approach to defence, and help shape a world‐class security operation that enables the Group to go faster, safely. Why Join us? If you think all banks are the same, you're wrong. We're a pioneering, fast ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

suppliers, partners, and third-party service providers. 4. Operational Cyber Security Management Oversee operational security activities across multiple entities, including: Threat detection and monitoring Incident response and remediation Vulnerability identification and patch management Endpoint protection and hardening Network and boundary defence IDS/IPS tuning, configuration, and alert … national security, critical infrastructure, aerospace, research). Demonstrable experience managing cyber security in high-assurance and classified system environments. Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics ...

Role Title: Information Security Senior Consultant – Detection and Response (Europe & Americas) About Westpac: Westpac is one of the world’s oldest banks and a leading financial services organisation with a strong presence across Australia, New Zealand and key international markets. We support individuals, businesses and institutions through a broad … with our customers and communities. About the Team: This role is a core part of Westpac’s global 24/7 cybersecurity monitoring and incident response capability - the bank’s first line of cyber defence. How will I help? You will be responsible for analysing and responding ...

Event Management (SIEM) platform. You will be responsible for onboarding new log sources, improving data pipelines, developing advanced detection use cases, and supporting incident response activities. This is an excellent opportunity for a security professional who enjoys building scalable, high-performing security monitoring environments and working … such as MITRE ATT&CK Build and tune correlation rules, alerts, dashboards, and anomaly detections Continuously improve detection quality and reduce false positives SOC & Incident Response Support Partner with SOC analysts to refine detection logic Support investigations through advanced SIEM querying and data analysis Provide subject matter expertise ...

integration and performance testing for all components Ensure solutions are reliable, reproducible and stable across releases Support continuous improvement of testing practices Monitoring and Incident Response Implement observability and monitoring tooling Track system performance and detect anomalies Support incident response, troubleshooting and root cause analysis ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on-call and incident response practices, and post-incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation-first ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

maintain of workspaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks. Develop and refine custom queries for advanced threat hunting, incident investigation, and reporting. Optimize SIEM performance, cost, and data retention policies Identify new log sources work closely with infrastructure teams Identify, onboard, and configure … detect anomalies and incidents across the applications and infrastructure estate. Collaborate with SOC team to enrich detection logic based on known vulnerabilities and misconfigurations. Incident Response & Security Operations: Formulate proactive threat hunting rule based on emerging threats and intelligence. Contribute to the development and improvement of security playbooks ...

track the cyber threats that BA faces and produce finished intelligence products for stakeholders across the organisation Support the Cyber Threat Intelligence and Cyber Incident Managers during cyber incident response activities Support the implementation of the broader BA/IAG Cyber Strategy What you'll bring … stakeholders Experience in threat modelling using frameworks such as STRIDE, PASTA, attack trees (Desirable) Ability to remain calm and prioritise under pressure Understanding of incident response methodology Strong understanding of actor methodology including their tactics, techniques and procedures Your experience: Holding or working towards relevant cyber intelligence certifications ...

critical national infrastructure programme. You will engage with suppliers, systems integrators, emergency services and wider government stakeholders. Key responsibilities Support cyber security operations, including incident response, vulnerability management and threat monitoring. Work with suppliers and systems integration partners to ensure security deliverables meet contractual and programme requirements. Support … development of an end-to-end Security Operations Centre. Review and maintain operational procedures, incident playbooks and security reporting. Lead and contribute to security governance forums. Advise stakeholders on security risks, mitigations and incident handling. Support security investigations and coordinate activity across programme, government and emergency-service teams. ...

KPMG is seeking a Cyber Response & Recovery Manager (German speaker) to lead reactive DFIR engagements in the CRS Team within Cyber Advisory. This hands-on role requires managing medium to large incidents, coordinating with the leadership, and developing in-house response capabilities. You will travel on short notice … when not responding, help mature clients' incident response capabilities. Based in London or Manchester, the role offers exposure to national critical incidents, opportunities #J-18808-Ljbffr ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet … complex transition projects (e.g., insourcing, offshore in-shore). Operational familiarity with CREST, NIS2, DORA, and the EU AI Act. Hands-on experience leading incident response, threat hunting, and investigations. Broad technical knowledge across Windows, Linux, cloud, hybrid environments, firewalls, EDR/XDR, IDS/IPS, VPNs ...

week in our Newcastle office. First 90 Days 30 Days Get to know Sage's database estate: the platforms in use, monitoring tooling, incident management processes, and the product teams you'll support. Familiarise yourself with Sage standards, ISO processes, and the Cloud Operations team's ways of working. … call rota before joining it. 60 Days Take active ownership of database operations across your assigned products. Handle monitoring, routine maintenance, and incident response with growing confidence. Begin contributing to automation scripts and service improvement initiatives. Engage with product delivery teams to support query optimisation and deployment activities. ...

processes and technology roadmaps. Serve as a liaison between industrial sites and central cybersecurity functions, aligning OT security measures with global cybersecurity frameworks and incident response procedures. Leadership & Team Development: Lead and mentor a high‐performing team of IC professionals, providing direction, setting clear objectives, managing performance … fostering professional growth. Champion a culture of accountability, excellence, and innovation, ensuring the team is motivated and aligned with Hitachi Energy’s strategic goals. Incident Response & Issue Escalation: Serve as a primary escalation point for OT/IC security incidents. Coordinate identification, investigation, and resolution in partnership with ...

Outside IR35) Contract: 6-month rolling contract Location: Liverpool (Hybrid) Keywords: Information Security, Cyber Security, ISO27001, NIST, Risk, Governance, Vulnerability Management, Incident Response, Outside IR35 A leading organisation within the transport and logistics sector is looking for an Information Security Analyst to join its Group IT function … bring Previous experience in an Information Security, Cyber Security or IT Security Analyst role. Strong understanding of security principles including risk management, vulnerability management, incident response and access control. Knowledge of security frameworks such as ISO 27001, NIST or Cyber Essentials . Experience with common security technologies such ...

estate by implementing remediation activities, hardening infrastructure, and driving continuous improvement. From addressing vulnerabilities and strengthening system configurations to automating remediation processes and supporting incident response, you'll help ensure our technology platforms remain secure, reliable, and aligned with industry best practices. Working closely with security, infrastructure, risk … actions and update vulnerability management platforms and tracking tools. Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions. Support cyber incident response activities by providing expertise on infrastructure configurations, vulnerabilities, and remediation actions. Help address and remediate weaknesses identified through security incidents and investigations. ...

Governance & Compliance: Lead the technical implementation of controls for ISO 27001 and TX‐RAMP, turning complex regulatory requirements into simple, actionable engineering standards. Lead Incident Response: Act with ownership during security events. You’ll lead investigations and root‐cause analysis, providing the Collective Wisdom needed to prevent future … software development with a security focus. What Sets You Apart: Experience securing video streaming architectures or high‐scale backend services. A history of leading incident response in a remote‐first environment. Deep expertise in OWASP Top 10 and secure API design. What Success Looks Like: Within 6 Months ...

instrumental in defining and upholding Service Level Objectives (SLOs) and Service Level Indicators (SLIs), implementing effective monitoring and alerting strategies, and leading operational incident response processes. What you'll do The core responsibility is to implement, maintain, and continuously improve the foundational platform infrastructure that powers all engineering … controlled, and auditable. Proactively manage the capacity of the infrastructure to consistently meet or exceed Service Level Objectives for latency, error rates, and availability. Incident Response and Post‐Mortems: Act as first‐line responders for critical system incidents. Triage, diagnose, and resolve complex production issues rapidly. Drive ...