801 to 825 of 2,373 Incident Response Jobs in the UK

will take you seriously because you've been in the same code they have. The scope is broad: application security, infrastructure security, detection and response, and the assurance work that keeps our certifications standing. You won't be covering it alone. The security team is seven people and growing … infrastructure and engineering teams: identify the signals worth collecting, write rules that catch real attacks without drowning us in noise, and build the response playbooks behind them. Incident Response -Lead security investigations into the production environment end to end, from first signal to root cause, across incidents ...

hear from you. What you'll be doing As a senior member of our Information Security team, you'll: Lead the investigation and response to complex cyber security incidents across cloud, endpoint, identity, network, email and application environments. Drive improvements to our Security Operations capability through enhanced detections, playbooks … practical recommendations that support informed business decisions. What you'll bring You'll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including ...

make coding agents effective against our stack Improve observability and alerting so that system health is visible and actionable without manual investigation Participate in incident response and post-incident review, treating failures as systemic issues rather than individual ones What We Need Kubernetes & Cloud: Hands-on experience ...

/defence environmentsDesirable:Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

/defence environmentsDesirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

Analysts and providing more in-depth analysis of potential threats to the organization. This role is crucial in the escalated investigation, triage, and response to cyber incidents while supporting the development and training of Tier 1 Analysts. The Tier 2 Analyst works closely with senior and junior analysts … ensure a seamless SOC operation and acts as a bridge between foundational and advanced threat detection and response functions. Responsibilities: Conduct escalated triage and analysis on security events identified by Tier 1 Analysts, determining threat severity and advising on initial response actions. Apply expertise in SIEM solutions utilizing ...

company's growth - You'll be key in everything IT going forwards - Automation, application architecture, monitoring and reporting day to day support and incident management etc. Requirements Proven experience of Information Security Engineering Broad security skills across monitoring, incident response, security controls, audit, incident resolution Strong ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

responding to incidents, but continuously improving through engineering excellence, threat intelligence, and data‐driven decision‐making. It combines real‐time defense (e.g., monitoring, detection, incident response) with long‐term capability building (e.g., tooling, automation, detection engineering, and platform integration) leaning into the opportunity of Agentic AI for faster … Operations and Engineering partners closely with Security Architecture, Threat Intelligence, Engagement and Engineering teams to ensure that controls are operationalized, detections are meaningful, and response processes are efficient and repeatable. A key focus is reducing mean time to detect and respond (MTTD/MTTR), increasing visibility across the environment ...

observability tools (e.g., Prometheus, Grafana, ELK stack, Cloudwatch).Excellent problem-solving skills and the ability to troubleshoot complex issues in distributed systems.Experience of Incident management and blameless postmortems that includes driving the incident response efforts during outages and other critical incidents, resolution, and communication in a cross ...

blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with senior stakeholders. … genuine risk from noise, make sound decisions and help us continuously improve rather than simply identify problems. What You’ll be Doing Security Operations & Incident Response Managing day-to-day security alerts, requests and tickets through to resolution, ensuring SLAs are achieved. Acting as a senior responder ...

Capita in Belfast is seeking a Senior Major Incident Manager to lead the Major Incident Management team within a 24x7 incident response operation. You will coordinate complex incidents, ensure timely resolution within SLAs, and drive continuous improvement across Capita services. The role requires strong leadership, expertise … ITIL-aligned incident management, and the ability to mentor staff while collaborating with cross-functional teams. #J-18808-Ljbffr ...

possess strong technical expertise in security operations, this is an exciting opportunity to make a significant impact.What you’ll do:Enhance threat detection & response by designing, implementing, and optimizing security tools, detection mechanisms, and secure configurations to identify and mitigate cybersecurity threats.Develop and optimize detection rules, signatures, and indicators … achieve security and compliance objectives across multiple cloud technologies (e.g. AWS GuardDuty/Security Hub/Inspector, GCP Security Command Center).Enhance threat hunting, incident response, and security operations through continuous improvement in detection, analysis, and automation.What you’ll need:You hold a degree (University/University ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Plan and manage the rota that keeps support cover … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to elevate and when to let a process run Experience managing SLAs, service reporting ...

blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with senior stakeholders. … genuine risk from noise, make sound decisions and help us continuously improve rather than simply identify problems. What You'll be Doing Security Operations & Incident Response Managing day-to-day security alerts, requests and tickets through to resolution, ensuring SLAs are achieved. Acting as a senior responder ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

offices on a hybrid basis. Cyber Security Specialist: Duties Adequate Implementation of security controls - XDR Escalation pint for security tickets raised in ITSM and Incident Management Portals Implementation/Operation of InfoSec processes, Threat Hunting, detection, monitoring and incident response Delivery of cyber security projects, implementation …/Testing cyber security technologies Support with controls, IAM, patch management and security event monitoring Identify cyber threats, hunting and exposure Involved in InfoSec incident management process - preparation, containment, analysis and response Implementation of new cyber security tooling and threat-informed systems Cyber Security Specialist: Experience ...

threat modeling, design reviews, and architectural assessments for new and existing systems.Contribute to internal security documentation, best practices, and developer guidance.Participate in security incident response when engineering expertise or automation support is needed.AI-Driven Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model … continuously improve the security posture of complex systems.Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS ...

partnership with a leading public organisation seeking an SOC Manager to design, implement and continuously improve the departments Security Operations strategy, ensuring rapid detection, response and recovery from cyber threats and incidents. What will you be doing? Lead, mentor, and develop a high-performing SOC analyst team, using … career framework to identify learning needs and map progression paths. Own the full incident lifecycledetection, triage, escalation, containment, and resolutionrun post-incident reviews, and drive continual improvements through regular exercises. Serve as the escalation point for alerts; prioritise and direct enhancements to monitoring coverage and detection rules across ...

their impact on Nuix's platforms and applications.Help implement and configure security controls across various cloud services, such as AWS and Azure.Participate in incident response activities under guidance, including supporting investigations of security breaches and helping implement corrective actions to prevent recurrence. Monitor and analyse security logs, alerts … O365 and Azure.Working knowledge of security technologies and protocols, such as Vulnerability tools, Data protection, encryption, IAM, endpoint detection, and event/incident management.Familiarity with industry security standards and frameworks, such as ISO 27001, NIST, and CSA.Good analytical and problem-solving skills, with a willingness to tackle complex security ...

cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

processes using PowerShell or Python, APIs and shared automation libraries. Acting as a senior escalation point for identity and security-tooling incidents. Supporting major incident response activities when required. Producing clear technical designs, standards and operational runbooks. Contributing PAM and security-tooling expertise to service reviews and solution … scripting skills, applied to security-tooling automation and integration. Working knowledge of cloud platforms such as Azure, AWS or GCP. Experience supporting security operations, incident management and SOC environments. Strong documentation, reporting and stakeholder-communication skills. The ability to work across multiple client environments and manage competing technical priorities. ...