851 to 875 of 2,372 Incident Response Jobs in the UK

performance of core business platforms Oversee 1st/2nd line support escalation, acting as the senior point of contact for critical issues Lead major incident management, root cause analysis, and post‐incident reviews Technical Leadership Provide hands‐on technical guidance across cloud infrastructure, application support, and DevOps practices … develop a team of Platform Operations Engineers, setting clear objectives and performance standards Manage team capacity, shift coverage (including North American EST support), and incident response models Foster a high‐performance, accountable, and collaborative team culture Drive hiring, onboarding, and ongoing development of team members Stakeholder Management ...

pipelines for database provisioning, schema changes, migrations, and configuration management. Partner with product engineering, SRE, security, and cloud teams to define SLAs/SLOs, incident response, root cause analysis, and risk mitigation. Establish monitoring, alerting, and observability for database health and performance. Drive proactive incident prevention. Define … access, security, backups, and compliance. Participate in design reviews, capacity planning, and product inception to translate feature requirements into scalable data solutions. Lead post-incident reviews and continuous improvement initiatives to reduce mean time to detect and recover. Represent the database platform across cross-functional initiatives and influence long ...

focused on continuous improvement. Own workforce planning, hiring, and succession planning for the security organization. Foster professional development and career growth across the team. Incident & Crisis Management Serve as key member of the incident response team. Lead post-incident reviews and drive lessons-learned improvements. Support ...

Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Lead real-time response to security incidents Oversee SIEM/SOAR integration, alerting, and playbooks Conduct investigations using log analysis, forensic techniques, and threat intelligence Client-Facing Security … Looking For 7+ years in cybersecurity , with 3–4+ years in a lead/principal capacity Experience spanning security engineering + SOC/incident response Strong expertise across: SIEM (Sentinel, Splunk, LogRhythm) IAM/PAM/identity security Vulnerability tooling (Tenable, Pentera, etc.) Hands-on experience across Azure ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

observability and operations side, you'll own platform monitoring across the production environment, using insight to drive continuous improvement in reliability, performance, and incident response. You'll lead dress rehearsals and disaster recovery testing ahead of major releases and campaign periods, own the on-call and incident monitoring … roster, and ensure post-incident reviews drive systemic learning rather than blame. Campaign operations is a core part of this role. Movember's annual campaign is a high-stakes, time-critical event, and this role is responsible for ensuring the team is operationally ready, releases are managed to schedule ...

early warning on hardware, storage and content delivery. Improve alerting quality and escalation logic so that attention is directed where it is needed. Lead incident response and post‐incident review, ensuring findings are fed back into the platform. Infrastructure Automation & Tooling Maintain and grow the code that … Java, Python or similar — alongside shell scripting Willingness to participate in an on‐call rota — shared, with a paid standby allowance Sound judgement under incident pressure, with strong written documentation and communication skills Proxmox or comparable virtualisation Working knowledge of AWS Monitoring and inventory tooling such as PRTG ...

Docker, and support the operation of services hosted on AWS cloud infrastructure. Write and maintain operational scripts (primarily Python) to automate routine tasks, support incident investigations and improve team efficiency. Collaborate with software developers to identify recurring operational issues and feed findings back into the development process to improve … application resilience. Maintain clear and up-to-date operational documentation including runbooks, deployment guides and incident post-mortems. Provide written and verbal progress updates on open incidents, deployments and operational improvements to the SAS group and wider stakeholders. Support on-call and out-of-hours incident response ...

support remediation, and contribute to the continued development of Hachette's global security capabilities. Who we are looking for Good understanding of cybersecurity operations, incident response and IT infrastructure. Practical knowledge of endpoint detection and response technologies and security monitoring platforms. Experience with technologies such as CrowdStrike ...

support remediation, and contribute to the continued development of Hachette's global security capabilities. Who we are looking for Good understanding of cybersecurity operations, incident response and IT infrastructure. Practical knowledge of endpoint detection and response technologies and security monitoring platforms. Experience with technologies such as CrowdStrike ...

cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk assessments and support audit and compliance activities. Drive improvements in data security, governance, and cyber … with ISO27001 principles and broader governance or quality frameworks such as ISO9001. Experience with backup, disaster recovery, and business continuity planning. Strong troubleshooting and incident management capability. Experience managing third‐party suppliers and service providers. Excellent communication, stakeholder management, and relationship‐building skills. Ambition and capability to progress toward ...

applications.Coordinate periodic security reviews and internal control assessments.Cyber Security and Security MonitoringOversee cyber security measures including vulnerability management, access control, security monitoring and incident detection.Ensure regular vulnerability assessments, security reviews and penetration testing are conducted.Incident ManagementEstablish and maintain procedures for managing information security incidents.Coordinate investigation, response and reporting … environments including networks, applications and infrastructure security.Strong analytical and risk assessment skills.Ability to communicate effectively with both technical teams and senior management.Ability to coordinate incident response and cross-departmental collaboration.High level of integrity and professionalism.Strong risk awareness and sense of responsibility.Ability to work effectively in a regulated banking ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

Essential: 3+ years' experience in a cyber security role. Experience with Microsoft 365, Entra ID, Purview, endpoint security, SIEM, and vulnerability management. Experience in incident response and security monitoring. Knowledge of ISO 27001, GDPR, and financial services regulatory requirements. Advanced security certifications such as CISSP, CISM, CCSP, GIAC ...

design engineering and ensure compliance with CLIENT security standards. Enable and govern Infrastructure as Code (IaC) practices across teams and environments. Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked. Document security processes, controls and operational runbooks in Confluence. ...

patching and security updates. Create and maintain technical documentation and operational procedures. Collaborate with development teams to improve deployment processes and automation. Participate in incident response and on-call support activities. Work within established engineering standards, security controls and operational processes. Support a 24/7 operational environment ...

patching and security updates. Create and maintain technical documentation and operational procedures. Collaborate with development teams to improve deployment processes and automation. Participate in incident response and on-call support activities. Work within established engineering standards, security controls and operational processes. Support a 24/7 operational environment ...

desirable extras include certifications such as GWAPT, GWEB, OSCP or AWS Security Specialty, Security Champions or developer training experience, and exposure to SOC or Incident Response environments. What's in it for you? Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment ...

equivalent.Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAFUnderstanding of security operations concepts, incident response, and detection capabilities.Knowledge of application security principles, including secure coding practices and OWASP guidance.Experience with DevSecOps practices and security automation.Familiarity with container ...