151 to 175 of 245 Incident Response Jobs in the UK excluding London

across cloud, endpoint, identity, collaboration, and infrastructure environments. Drive cyber resilience initiatives, ensuring critical services can withstand and recover from disruption. Enhance threat detection, incident response, vulnerability management, and security monitoring capabilities. Develop automation and engineering solutions to improve operational efficiency and security outcomes. Provide technical leadership during ...

decisions, and challenge choices that add complexity without adding value. Build to the client's technical standards and reference architecture. Support live services, leading incident response and longer-term resilience fixes. Work closely with product managers, designers, testers, and other team members to deliver user-focused services. Coach ...

have the opportunity to develop: Hands-on experience operating production network infrastructure. Practical knowledge of BGP, OSPF and resilient network design. Structured troubleshooting and incident-response skills. Network monitoring, observability and capacity-management techniques. Python, APIs and infrastructure automation. Safe and effective use of AI-assisted engineering tools. ...

Assist in monitoring and maintaining the security of the Thales adopted public cloud infrastructure (e.g., Azure, Google Cloud) in compliance with government security guidelines Incident Response: Support the reporting, investigation and analysis of security incidents and potential breaches within classified environments, helping to resolve issues swiftly Security Auditing ...

network resilience. Experience managing and challenging MSPs and third-party suppliers. A hands-on background in security, patching, vulnerability management, disaster recovery and incident response. Experience operating within regulated or well-governed environments, ideally aligned to ISO 27001 or Cyber Essentials. The ability to communicate technical concepts and risk ...

security capabilities across Microsoft Sentinel and Defender XDR, working directly with clients to strengthen their environments. This is a hands-on engineering position, with incident response involvement focused on escalations rather than routine alert monitoring. The role Build, deploy and tune Sentinel detection rules using KQL. Configure … optimise Microsoft Defender XDR and wider Microsoft 365 security controls. Develop automation and response playbooks using Azure Logic Apps. Run vulnerability scans and phishing simulations, translating findings into practical recommendations. Contribute to development and deployment processes using DevOps and CI/CD. Share knowledge with colleagues and participate ...

Windows Services in line with agreed SLAs, escalating as necessary. Act as Tier 2/Tier 3 support for Windows-related issues, performing incident response and remediation. Coordinate with incident and technical managers during high-severity incidents. Identify root causes of recurring incidents and implement long-term ...

projects Migrate third-party security vendor solutions into the Microsoft Security stack Build security automation using Logic Apps, PowerShell and Microsoft cloud services Support incident investigation and provide technical escalation to the SOC team Produce high-level and low-level design documentation Ensure compliance with governance, security and operational … Cloud, Defender for Identity and Defender for Cloud Apps Microsoft Entra ID: Conditional Access, PIM, Identity Governance, Entra GSA Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud ...

validate low-confidence alert enrichments, threat summaries, and triage recommendations generated by AI agents. Assign, dispatch, and track complex security investigations, policy changes, and incident response playbooks to appropriate Tier 2/3 analysts and consultants. Serve as the operational escalation point when automated pipelines encounter exceptions, edge … template maintenance, submitting structured enhancement tickets to engineering when underlying code changes are required. 3. Quality Assurance & Performance Auditing Regularly audit AI-generated outputs (incident summaries, triage context, customer reports) against human analyst benchmarks to ensure high fidelity and operational safety. Identify recurring false positives or hallucination patterns, collaborating ...

address single points of failure. Lead and develop a technical team of three, providing technical direction and operational oversight. Manage infrastructure upgrades, maintenance, incident response and continuous improvement initiatives. Establish operational standards, documentation and ITIL-aligned processes. Develop technical roadmaps, introducing automation, monitoring and DevOps practices where appropriate. … understanding of Linux, networking, backend services and modern infrastructure technologies. Proven experience leading technical teams and managing infrastructure projects. Knowledge of ITIL, systems operations, incident management and change control. Experience improving infrastructure resilience, performance and operational efficiency. Strong stakeholder management, communication and budget management skills. Relevant technical qualifications ...

cyber security strategy, identifying priorities and driving improvements. Manage the relationship with the external Security Operations Centre, reviewing service effectiveness and coordinating investigations and incident response. Monitor emerging threats, technologies and regulatory developments to understand their potential impact. Develop AI governance, controls and guidance to support the safe adoption … delivering improvements. Experience managing an external SOC or security service provider. Practical knowledge of Microsoft Defender and Microsoft Sentinel. An understanding of cloud security, incident response and vulnerability management. An interest in AI governance, including how to assess risks and establish proportionate controls. The confidence to deliver presentations ...

performance and cost Build security and compliance controls into pipelines and infrastructure Work closely with developers, testers and architects to keep releases smooth Support incident response and troubleshoot issues in live services Document processes, environments and runbooks Key Requirements Proven experience on NHS or UK government programmes Strong ...

Azure App Services, Function Apps and other services Integrate tools for automated testing, code quality and security (e.g. SonarCloud, Snyk) Set up monitoring and incident response with Azure Monitor and Application Insights Manage secrets and access control to support secure cloud practices Work closely with developers and stakeholders ...

testing security controls, validating SOC detection capabilities and identifying vulnerabilities before they can be exploited. Working alongside specialists across Red Teaming, Threat Intelligence and Incident Response, you'll contribute to improving defensive security capabilities and protecting critical systems. Key Responsibilities Support Red Team exercises, critical control testing, cyber ...

that systems remain aligned with internal security policies and regulatory expectations. Alongside supplier management, you’ll oversee core systems and user access management, support incident response activities and maintain business continuity and disaster recovery readiness. The role will also involve supporting internal audits, regulatory reviews and technology governance ...

deployment and integration of security tools, ensuring effective implementation and operational readiness. Monitor and maintain compliance with security standards, policies, and procedures. Participate in incident response investigations and contribute to security awareness and education initiatives. Identify security gaps and provide guidance on system and platform enhancements to improve ...

coding standards. Stay current with emerging threats, vulnerabilities, and industry trends, integrating this knowledge into risk assessment processes. Provide technical guidance and support for incident response efforts related to application security incidents. Conduct quarterly application security reviews to evaluate and validate the effectiveness of security controls. Updating ...

with security teams to implement infrastructure hardening and vulnerability management. Optimise infrastructure costs, energy efficiency and environmental impact. Support operational readiness, performance monitoring and incident response planning. Customer & Stakeholder Engagement Serve as technical authority for infrastructure discussions with senior customer stakeholders. Present architecture recommendations to customer leadership ...

team in programme-level sessions, articulating updates, risks, and dependencies. Risk & Issue Management : Identify and address risks promptly, ensuring mitigation plans are in place. Incident Response : Act as a key escalation point during live incidents, helping to coordinate resolution and communication. Removing Blockers : Proactively address obstacles that hinder ...

Manage and develop IT infrastructure, cloud services, networks and Microsoft 365 environments. Cybersecurity and Information Assurance: Lead cybersecurity strategy, risk management, security controls and incident response. Enterprise Systems and Applications: Oversee business-critical systems, applications, integrations and technology platforms. Data Governance and Management Information: Ensure effective data management, reporting ...

technical authorities and security stakeholders to demonstrate compliance with relevant defence security standards. Support through-life product security, including vulnerability management, patching, obsolescence and incident response. Provide technical security guidance to multidisciplinary engineering teams. Essential Experience Proven experience in Product Security Engineering, Systems Security Engineering or Secure by Design ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...