176 to 200 of 320 Incident Response Jobs in the UK excluding London

Security Operations Manager to lead our in-house Security Operations capability while remaining deeply involved in the day-to-day technical aspects of detection, response and continuous improvement. This role is ideal for someone moving from a Senior SOC Analyst, Senior Security Engineer or SOC Team Lead position … enterprise, cloud and operational technology environments. Improving detection capabilities, automation and SOC processes to stay ahead of emerging threats. Working closely with vulnerability management, incident response and governance teams to strengthen the organisation's security posture. Taking part in the on-call rota and providing technical leadership during ...

segmentation platforms, Sophos, Mimecast, XDR solutions, vulnerability scanners and hardening baselines. Managing Firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python … Terraform or similar tools. Supporting vulnerability assessments and driving remediation across the estate. Contributing to secure design reviews across applications, infrastructure, and cloud services. Incident response experience is desirable but not essential. We're looking for someone with: Strong hands-on experience with network infrastructure and security, segmentation ...

work. Alongside this you will oversee security controls across corporate and project systems, manage security assessments and supplier assurance, maintain audit documentation and support incident response. As the onsite expert you will also cover Microsoft 365 security, identity and access management, endpoint protection, vulnerability management, SIEM monitoring and collaborate … Strong knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and UK GDPR Experience with Microsoft Defender, Sentinel, EDR/XDR and vulnerability tools Incident response and SOC experience Strong stakeholder management and reporting skills Experience in a regulated environment would be beneficial What you will ...

this next phase of growth. As a Cyber Security Lead , you will lead the delivery of the cyber security roadmap, strengthen detection and response capabilities, and act as the technical authority for all Microsoft security technologies. Working closely with Infrastructure, Cloud, and Architecture teams, you will ensure security controls … remediation aligned to business risk. Manage and enhance security baselines, configuration standards, and policy enforcement across the estate. Lead continuous improvement initiatives across detection, response, automation, and cloud security posture. Support governance activities including risk assessments, audits, and compliance reviews. Technical Experience: Strong hands-on experience with Microsoft Defender ...

improve CI/CD pipelines and automation. Implement observability solutions using Prometheus, Grafana and OpenTelemetry. Support reliability engineering initiatives including SLOs, SLIs and incident response improvements. Collaborate with architects, security teams and software engineers to resolve complex technical challenges. Contribute to engineering standards, best practises and platform evolution. ...

passionate about protecting organisations from modern cyber threats. You'll ideally have experience with: Microsoft Defender or similar endpoint protection solutions Security Operations and Incident Response SIEM monitoring and security investigations Email security platforms such as Mimecast or Proofpoint Secure Web Gateway technologies such as Zscaler Vulnerability Management ...

ongoing optimisation Managing networking, routing, firewalls, VPNs and connectivity Infrastructure monitoring, alerting and performance optimisation Implementing and managing web monitoring and observability platforms Incident response, root cause analysis and continual service improvement Capacity planning, disaster recovery and business continuity Supporting security best practice, patch management and infrastructure compliance ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...

automation frameworks, and database‐as‐code practices using Redgate Flyway. Take ownership of critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate closely with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure‐by‐design, compliance ...

ensuring compliance with ISO27001, GDPR, PCI DSS and other regulatory standards. Drive a proactive approach to cyber security, risk management, audits, vulnerability management and incident response. Lead and develop the Data & Development team responsible for in‐house web systems, development planning, testing and data provisioning. Champion secure software development ...

automation frameworks, and database-as-code practices using Redgate Flyway. Take ownership of critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate closely with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure-by-design, compliance ...

resolution on complex technical tickets across the SaaS platform. Writing and troubleshooting complex SQL queries. Debugging across a range of programming languages. Leading critical incident response and post-incident reviews. Managing, coaching and developing 4-5 senior technical staff. Providing technical insight into Product and Engineering teams ...

ensuring the stability, availability and performance of critical banking and payment systems. You'll act as a senior technical escalation point, lead major incident response and help shape the future of operational tooling and automation. Key responsibilities include: Leading technical response during major incidents and coordinating service … another enterprise scheduling platform. SQL Server administration, troubleshooting and performance tuning. Windows Server environments. PowerShell scripting. SFTP. Azure DevOps. ITIL/ITSM practices. Major Incident Management within a production support environment. Automation and operational improvement initiatives Contact: Zach Bennett - CPS Group By applying to this advert you are giving ...

platform optimisation Designing and implementing endpoint security controls Integrating CrowdStrike with technologies including Active Directory, ServiceNow, SIEM and SOAR platforms Developing detection rules, response workflows and security policies Supporting threat hunting and improving endpoint visibility Working across Windows server, desktop and cloud workloads Providing technical expertise throughout implementation … experience with: Enterprise deployment of CrowdStrike Falcon Falcon sensor rollout and lifecycle management Policy creation and tuning Host groups, prevention policies and detection management Incident response and threat hunting using CrowdStrike Falcon Complete, Falcon Insight or Falcon Prevent Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms ...

ownership of technical operations across all sites and installations Ensure all CCTV (fixed, temporary, deployable) is correctly configured and monitored Lead technical fault escalation, incident response, and post-incident review Own the group’s technology roadmap and future platform strategy ARC Leadership Set and enforce ARC performance … standards (response times, accuracy, false alarm rates) Own the 24/7 escalation structure and operational authority levels Work with the ARC Manager on staffing, shift design, and coverage Ensure continuous NSI Gold compliance Compliance & Certification Lead the group’s ISO 9001 programme and scope additional certifications Maintain ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

JPMorgan Chase & Co. in the United Kingdom seeks a Lead Software Engineer focused on Site Reliability and Operations Excellence to strengthen incident response, drive reliability standards, and guide durable improvements across a complex technology stack. You will own the incident management lifecycle, serve as Incident Commander ...

around 25 through a period of genuine transformation. What you'll be doing: Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scale Build and govern an internationalised … manage the Technology Resilience framework, including business impact analysis, Disaster Recovery exercises (cyber-attack, ransomware, infrastructure failure scenarios) and Business Continuity Plans Lead major incident response and postmortem/root cause processes, driving a culture that reduces repeat incidents and strengthens proactive problem management Own the Change Advisory ...

Around 1+ year's commercial experience within cyber security or a SOC environment Good understanding of networking, operating systems and security fundamentals Exposure to incident response and security monitoring Experience with any SIEM platform (Microsoft Sentinel, Splunk, Microsoft Defender, QRadar, Elastic etc.) Strong communication skills What ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

likely have experience with several of the following: Microsoft security technologies including Defender, Entra ID, Intune and Microsoft 365 Security. Security Operations, Incident Response and Vulnerability Management. Identity & Access Management and privileged access controls. Endpoint security, device management and secure configuration. Windows Server, networking, cloud technologies and enterprise ...

security supports business growth and emerging technologies. This role is ideal for an individual who wants to move beyond traditional security operations and incident response, taking ownership of information governance, Microsoft Purview administration and AI security controls within a highly collaborative environment. You'll play a key role ...

patterns for reliable and repeatable builds. Develop platform services, APIs (FastAPI) and automation using Python. Drive improvements in reliability, scalability and performance. Lead incident response, fixing and root cause analysis. Work across compute, networking and storage layers. Collaborate with engineering teams to improve platform usability. Mentor engineers ...