326 to 350 of 903 Incident Response Jobs in the UK excluding London

hear from you. What you'll be doing As a senior member of our Information Security team, you'll: Lead the investigation and response to complex cyber security incidents across cloud, endpoint, identity, network, email and application environments. Drive improvements to our Security Operations capability through enhanced detections, playbooks … practical recommendations that support informed business decisions. What you'll bring You'll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including ...

/defence environmentsDesirable:Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

/defence environmentsDesirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with senior stakeholders. … genuine risk from noise, make sound decisions and help us continuously improve rather than simply identify problems. What You’ll be Doing Security Operations & Incident Response Managing day-to-day security alerts, requests and tickets through to resolution, ensuring SLAs are achieved. Acting as a senior responder ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Plan and manage the rota that keeps support cover … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to elevate and when to let a process run Experience managing SLAs, service reporting ...

blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with senior stakeholders. … genuine risk from noise, make sound decisions and help us continuously improve rather than simply identify problems. What You'll be Doing Security Operations & Incident Response Managing day-to-day security alerts, requests and tickets through to resolution, ensuring SLAs are achieved. Acting as a senior responder ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

offices on a hybrid basis. Cyber Security Specialist: Duties Adequate Implementation of security controls - XDR Escalation pint for security tickets raised in ITSM and Incident Management Portals Implementation/Operation of InfoSec processes, Threat Hunting, detection, monitoring and incident response Delivery of cyber security projects, implementation …/Testing cyber security technologies Support with controls, IAM, patch management and security event monitoring Identify cyber threats, hunting and exposure Involved in InfoSec incident management process - preparation, containment, analysis and response Implementation of new cyber security tooling and threat-informed systems Cyber Security Specialist: Experience ...

partnership with a leading public organisation seeking an SOC Manager to design, implement and continuously improve the departments Security Operations strategy, ensuring rapid detection, response and recovery from cyber threats and incidents. What will you be doing? Lead, mentor, and develop a high-performing SOC analyst team, using … career framework to identify learning needs and map progression paths. Own the full incident lifecycledetection, triage, escalation, containment, and resolutionrun post-incident reviews, and drive continual improvements through regular exercises. Serve as the escalation point for alerts; prioritise and direct enhancements to monitoring coverage and detection rules across ...

Cyber Security Consultant - Incident and Vulnerability Management, UK Up to £570 per day, dependent on experience 3-month contract (Inside IR35) Hybrid working, 1 to 2 days onsite in Preston, London or Birmingham Must hold active SC clearance ABOUT THE CLIENT Our client is a major organisation operating within … They are currently transitioning towards a multi-supplier service model and require an experienced Cyber Security Consultant to provide governance and coordination across security incident and vulnerability management. THE BENEFITS Hybrid working, approximately 1 to 2 days onsite Choice of Preston, London or Birmingham locations Opportunity to support ...

processes using PowerShell or Python, APIs and shared automation libraries. Acting as a senior escalation point for identity and security-tooling incidents. Supporting major incident response activities when required. Producing clear technical designs, standards and operational runbooks. Contributing PAM and security-tooling expertise to service reviews and solution … scripting skills, applied to security-tooling automation and integration. Working knowledge of cloud platforms such as Azure, AWS or GCP. Experience supporting security operations, incident management and SOC environments. Strong documentation, reporting and stakeholder-communication skills. The ability to work across multiple client environments and manage competing technical priorities. ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

sources against use cases to identify and close coverage gaps Designing use cases aligned to MITRE ATT&CK Building SOAR automations and automated response workflows Writing incident response playbooks for customers Owning the detection-as-code approach — pipelines, version control, deployment Running workshops, coverage assessments ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

technologies and business initiatives, as well as participate in Change Advisory Board (CAB) meetings to provide security assuranceSupport the implementation, delivery, and exercising of incident and business continuity response plans, and contribute to the lessons identified processAct as a member of the incident response team … Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience ...

problems.Develops secure high-quality production code, and reviews and debugs code written by others.Adds to team culture of diversity, opportunity, and respect.Develops and maintains incident response procedures, including root cause analysis and postmortem documentation.Required Qualifications, Capabilities, and Skills:Experience with formal training or certification on software engineering concepts.Strong … understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management.Ability to manage highly technical team of Site Reliability Engineers.Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness of data sensitivity.Ability ...

high-quality production code, and reviews and debugs code written by others. Adds to team culture of diversity, opportunity, and respect. Develops and maintains incident response procedures, including root cause analysis and postmortem documentation. Required Qualifications, Capabilities, and Skills: Experience with formal training or certification on software engineering … concepts. Strong understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management. Ability to manage highly technical team of Site Reliability Engineers. Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness ...

high-quality production code, and reviews and debugs code written by others. Adds to team culture of diversity, opportunity, and respect. Develops and maintains incident response procedures, including root cause analysis and postmortem documentation. Required Qualifications, Capabilities, and Skills: Experience with formal training or certification on software engineering … concepts. Strong understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management. Ability to manage highly technical team of Site Reliability Engineers. Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness ...