1 to 25 of 80 Remote/Hybrid Incident Response Jobs in the UK excluding London

Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations … deliver a cyber resilient business and the Incident Response Lead is essential in achieving our goals. This role will be integrated into an active and ambitious global cyber security function, contributing to SPEN's cyber security purpose of delivering cyber resilient OT and IT, to enable a safe ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Incident Responder/DFIR Consultant Location: Gloucester or London - Hybrid/Flexible Salary: £60,000-£80,000 DOE Type: Permanent I'm working with a growing cyber security consultancy and MSSP looking for an Incident Responder/DFIR Consultant to join its specialist security team. You'll investigate … incidents across endpoint, identity, network and cloud environments. Conduct digital forensic investigations, including evidence collection and analysis. Coordinate containment, eradication and recovery activities. Develop incident response plans, playbooks and support tabletop exercises. Communicate investigation findings and recommendations directly to customers. What We're Looking For Hands-on incident ...

sharing knowledge and guiding good practice. Key functions/outputs: 1. Vulnerability Management, Reporting & Risk Prioritisation 2. Endpoint, Identity & Cloud Security Engineering (AWS) 3. Incident Response Leadership & Operational Security 4. Secure Configuration, Hardening & Compliance Assurance 5. Security Design Review, Change Impact Assessment & ST&V 6. Stakeholder Engagement, Governance … assure cloud security controls across networking, identity, logging/monitoring, and configuration management; validate guardrails and support secure landing zone patterns where applicable. Incident Response Leadership & Operational Security: Incident Identification: help to recognise and confirm potential incidents through alerts, logs, and user reports; apply sound judgement ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

monitoring, detecting, analysing, and responding to security threats and incidents. You will help drive continuous improvements across security operations while ensuring robust monitoring and incident response capabilities are maintained. Key Responsibilities Manage the day-to-day operation of the SIEM platform, including monitoring, administration, and optimisation. Develop, fine … tune, and maintain detection rules and use cases to improve threat visibility. Investigate security alerts and incidents through to resolution. Provide effective monitoring and incident response capability across the organisation. Analyse security events to identify trends, attack patterns, and emerging threats. Escalate and track security issues through ...

control systems remain secure, compliant and operationally robust. You'll work closely with engineers, cybersecurity specialists, and external partners to monitor OT environments, support incident response, maintain asset and patch records, and contribute to risk, compliance and audit activities. The role also supports the ongoing improvement … safe, secure and continuous delivery of energy to millions. Location: UK-based hybrid role, Occasional travel to site. Day to day Support OT cybersecurity incident response, including investigation, evidence gathering, containment, remediation, and technical actions such as system isolation and patching, under CSIRT and GSOC guidance. Operate ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

company's cyber security posture. This is an excellent opportunity for someone who enjoys a varied role spanning security operations, infrastructure security, compliance, incident response and security improvement projects. This position is predominantly remote, with occasional travel to the company's Essex office when required. Key Responsibilities Manage … Strong hands-on experience with Microsoft security technologies including: Microsoft 365 Security Microsoft Entra ID Microsoft Defender Microsoft Purview Intune Azure Security Experience with incident response, threat detection and remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security ...

environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead on more complex … your technical expertise to investigate incidents, understand their underlying causes and introduce improvements that reduce the likelihood of similar issues occurring again. Beyond incident management, you'll work closely with the wider IT team to assess vulnerabilities, strengthen security controls and ensure new technologies are introduced securely. ...

emerging threats Review existing security tools and controls, recommending improvements where required Work closely with infrastructure engineers, external SOC providers and security partners on incident response and cyber resilience What we are looking for: Around 2-3+ years of commercial cyber security experience Hands on experience within … Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra ID, PIM, MFA or SSO Broader knowledge of Microsoft Azure and cloud security Strong communication skills ...

root cause analysis, and implementation of corrective actions to maintain service reliability and security. Required Skills: * 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention ...

Manage and coach a small team of Information Security professionals. Manage and drive effective performance of multiple security vendor partners. Own and enhance security incident response processes and recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including … will need: Proven experience leading a Cyber Security, Cyber Defence or Information Security function within a complex organisation. Strong knowledge of security operations, incident response, risk management and security governance. Experience developing and implementing security policies, controls and security improvement programmes. Excellent stakeholder management and communication skills, with ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...