376 to 400 of 937 Incident Response Jobs in the UK excluding London

high‐quality production code, and reviews and debugs code written by others. Adds to team culture of diversity, opportunity, and respect. Develops and maintains incident response procedures, including root cause analysis and postmortem documentation. Required Qualifications, Capabilities, and Skills Experience with formal training or certification on software engineering … concepts. Strong understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management. Ability to manage highly technical team of Site Reliability Engineers. Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness ...

successful candidate will work closely with engineering, architecture, and product teams to implement modern reliability practices, automate operational workflows, and establish robust monitoring and incident management frameworks. Key Responsibilities Collaborate with engineering teams to modernize IT operations by improving observability, automation, and operational efficiency. Design and implement observability platforms … enhance operational intelligence and automation. Automate repetitive operational tasks (toil reduction) using scripting, orchestration tools, and automation frameworks. Implement self‐healing systems and automated incident response mechanisms to support autonomous operations. Collaborate with cross‐functional teams to ensure systems are scalable, resilient, and maintainable. Lead incident management ...

cybersecurity perspective. Support secure implementation of Industrial IoT (IIoT), cloud-connected industrial systems, and remote access solutions. Develop and maintain OT-specific cyber incident response procedures. Lead investigations and response activities for cybersecurity incidents impacting OT systems. Coordinate with IT Security Operations, engineering teams, and third-party ...

Relationships: CTTO — Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) — Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering — Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud — Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate — multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership — has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive risk down and evidence progress. Security Incident Response: Act as a senior responder for security alerts and incidents, leading investigation, containment and post-incident review alongside the global ...

compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed a security-aware culture. Manage security incident response planning and coordinate with Security Operations Centre (SOC). Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP). Excellent communication skills, able to convey complex security topics to non-technical stakeholders. Pragmatic, calm, and resilient under pressure during incident management. Why Join Us? Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies ...

cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

tooling, and platform controls. On the information security side, you'll provide the technical expertise that underpins our ISO 27001 and Cyber Essentials certifications, incident response, and day-to-day governance. If you've always wanted to work somewhere that treats security as a first-class concern rather … first point of contact for infrastructure queries across the team, maintaining clear and current documentation accessible to all colleagues. Information Security Provide the technical response to security incidents, including containment, eradication, and recovery, escalating to the CFO and Head of Engineering as required. Conduct DPIA technical reviews ...

particularly across Kubernetes and container images Triage and validate vulnerabilities, including developing PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS/IPS rules and technical runbooks Monitor emerging threats and continuously improve ...

ensure compliance with client’s security standards and technical standards.Enable and govern Infrastructure as Code (IaC) practices across teams and environments and contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked Also, document security processes, controls and operational runbooks ...

Bash, or Python.Experience with CI/CD pipeline implementation and support.Strong understanding of Azure networking, security, and governance.Experience with cloud monitoring, logging, and incident response.Good understanding of backup, disaster recovery, business continuity, and high availability architecture.Strong analytical, troubleshooting, and problem-solving skills.Excellent communication and collaboration skills. #J-18808-Ljbffr ...

Working alongside development and engineering teams identify candidate to migration from private to public cloud 3. Create and maintain automation routines, automated remediation and incident response. 4. Define Continuous Integration pipelines 5. Work alongside development teams to deliver cloud solutions 6. Manage and maintain ongoing deployment of services ...

strategies to ensure data protection and business continuity]Ability to implement monitoring and logging solutions e.g., CloudWatch, to ensure system reliability, observability, and proactive incident responseComfortable working in Agile development teams, translating business requirements into technical solutions, and actively participating in sprint planning, retrospectives, and daily stand-upsFamiliarity ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands‐on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA‐enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

focus on performance, scalability, and cost efficiency. Take part in on‐call rotations and own the operational health of high‐availability production services, including incident response and post‐incident improvements. Lead design reviews and code reviews, raising the quality bar across the team and mentoring mid‐level ...

risk mitigation strategies and security controls to reduce and manage identified risksMonitor compliance with applicable laws, regulations, and contractual obligations related to information securityLead incident response and breach management, including executive communications, regulatory coordination, and post incident remediationPartner with IT and Digital teams to embed secure ...

understanding of how they operate and identifying opportunities to improve reliability, performance and maintainability. Troubleshoot and resolve complex technical and operational issues. Participate in incident response and post-incident learning activities. Support architectural decisions that improve scalability and resilience. Collaborate with Product, Engineering and Operational stakeholders. Contribute ...

internal developer platform* Collaborate with **DevSecOps** to integrate security, compliance, and resilience practices* Contribute to cross-team initiatives that improve reliability across the stack### **Incident & Operational Excellence*** Play a key role in **incident response**, particularly within your specialism* Contribute to **on-call rotations** and continuous improvement ...

. This is a key role within our Managed Security Services Provider (MSSP) environment, where you will lead on the analysis and response to security incidents across multiple client environments. Working closely with the SOC Team Lead, you will support day‐to‐day monitoring and investigation activities, engage directly … helping to shape the future direction of our security services. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...