426 to 450 of 934 Incident Response Jobs in the UK excluding London

pragmatic, well-understood patterns over those who lean on theory, jargon, or unnecessary complexity. A platform you've built and kept running, or an incident you've resolved and can clearly explain, will count for far more than a stack of certifications. Core Responsibilities Provision, configure, and harden … example CloudWatch) across services and infrastructure Maintain data pipelines, backup, and lifecycle management for Aurora PostgreSQL and other AWS-native data tooling Platform Operations & Incident Response Act as first responder for infrastructure incidents, supporting root cause analysis and post-incident review Coordinate patching, upgrades, and lifecycle management ...

Falcon. You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities. What your days will look like Lead day‐to‐day operations across Analysis and Engineering teams delivering Managed Cyber Defence services. … ongoing client interactions related to service delivery and performance. Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage). The role is for you if: You have experience of embedding AI tooling within ...

people, platforms, and world‐class research. This is a hands‐on, impactful role at the centre of our cyber‐security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture. You will work closely with IT, research computing, governance, and legal teams to ensure … accuracy. Investigate and triage security alerts, escalating and responding appropriately. Act as a responder for security incidents, supporting containment, eradication, and recovery. Produce clear incident documentation, including reports and root‐cause analysis. Develop and refine detection rules, automation workflows, and threat‐based use cases. Apply threat intelligence to improve ...

advertised to attract the right skills needed for the roleThe post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10 % per annum. Please … they are escalated and handled with the correct level of technical understanding for successful remediation by the affected organisations.In the event of a major incident, depending on your experience, you may also support the incident response activities and onwards more detailed investigations.The CSOC has an excellent training ...

Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective … liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload ...

Security Operations team to proactively identify and address cybersecurity threats, drive operational excellence, and enhance our security posture. You'll lead strategic initiatives, supervise incident response, manage critical security projects, and foster a collaborative environment, ensuring top-tier system performance and adherence to security policies. Power without pause. … Provide hands-on expertise in the delivery of internal security projects and technical support for operational excellence. Act as a technical escalation point for incident management, ensuring prompt resolution and the consistent implementation of security processes and compliance. Collaborate closely with external suppliers and manage key security service forums ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. Key Accountabilities - Reduction of Cyber risk exposure through strong Security Operations ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...

Argo Workflows for legacy pipelinesRedis for key/value storageTerraform for infrastructure as codePython and GoLang for our Platform toolsDatadog, Sentry for observability and incident responseWhat You Will Be DoingPlatform & Infrastructure ReadinessApply AI-assisted approaches to reduce toil, improve reliability, and support platform decision-making where it creates clear … driving high-impact outcomes across platform, infrastructure, or reliability teamsBring hands-on experience applying automation and AI/LLM-based tools to improve observability, incident response, and reduce operational toilStrong technical background across infrastructure, cloud platforms, and distributed systemsKnowledge of cloud architecture, workload management, DevOps, and SRE principlesExperience ...

industry exposure with a depth of technical security knowledge and experience in cyber security, including cyber strategy, cyber risk management, security governance, cyber resilience, incident response, security operations, IAM and cyber threat management. Experience and knowledge of the regulatory, assurance and standards environment facing healthcare clients, including cyber … accept speculative CVs from agencies - you can see our policy on agencies here: Similar vacancies you might be interested in Cyber Response and Recovery - Assistant Manager (Proactive) Assistant Manager - Cyber and Digital Health Cyber Response and Recovery - Assistant Manager (Reactive) Cyber Response & Recovery - Manager (Remediation focus) #J ...

practices. Monitor security risks and implement appropriate controls. Manage user access, permissions and identity management. Ensure compliance with relevant legislation and organisational policies. Coordinate incident response and recovery. Service Delivery Ensure timely and effective resolution of IT issues. Monitor service desk performance and user satisfaction. Escalate and manage … self-confident. Microsoft certifications. Experience with ERP or line-of-business systems Pipedrive, Sage, RAPS and Procore). Key Performance Indicators (KPIs) Service desk response and resolution times. Cyber security compliance. Successful delivery of IT projects. Budget adherence. Team performance and development. Reduction in recurring IT incidents. Authority ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques ...

frameworks, and risk management processes. Develop and maintain the Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus ...

reliability, and operational efficiency. The role also plays a key part in protecting the firm's technology estate, supporting cybersecurity operations, compliance requirements, and incident response activities. Working closely with IT, security, and development teams, the postholder provides technical expertise, supports infrastructure and transformation projects, delivers 3rd line ...

with DevOps and project teams. Build and maintain Infrastructure as Code solutions, dynamic documentation and network architecture standards. Implement network monitoring, performance optimisation and incident response to ensure highly available services. Strengthen network security through access controls, encryption, security reviews and collaboration with IT teams. Partner with internal ...

environmentMonitor platform performance, availability, security events, and user experienceContribute to automation initiatives using technologies such as PowerShell, Python, Terraform, and APIsAssist with incident response, vulnerability remediation, risk assessments, and continuous service improvementProduce technical documentation, operational reporting, and platform metricsWhat We're Looking ForWe're interested in candidates ...

security technologies, including anti-virus solutions, firewalls, internet filtering, vulnerability management, endpoint protection and secure remote access systems. The role will also support cyber incident response, security audits, compliance activities and the delivery of new security initiatives. Working closely with colleagues across Digital Services and wider NHS Scotland ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) Networking & Edge ...

based tooling.Innovate in the areas of SIEM and SOC and develop best practice.Mentor and oversee development of junior analysts.Work to well-defined SLAs & KPIs.Support incident response where required.This position will require you to undergo a security clearance check.Basic Qualifications (Required Skills/Experience): 3+ years’ experience ...

security alerts and events using our core security tools Help ensure security controls are deployed and operating effectively across our technology environment Support incident response activities by following and improving security processes and procedures Monitor systems for security and compliance issues and help drive remediation Maintain and support ...

Working under the direction of senior cyber security staff, the postholder will play a key operational role in identifying vulnerabilities, responding to alerts, supporting incident response, and ensuring remediation actions are tracked and completed. This is a hands-on, operational role suited to someone developing their cyber security ...

policies and risk management framework Conduct vendor and third-party security assessments as part of the procurement and onboarding process Contribute to Dexory's incident response and vulnerability management processes Monitor the threat landscape for risks relevant to an autonomous robotics and warehouse intelligence business Develop ...

will contribute to infrastructure decisions and service architecture within our Azure environment, support observability, monitoring and alerting for production services, and participate in incident response and root cause analysis when issues arise. You will take end-to-end ownership of features from technical design through to delivery ...

engagements across the full stack — from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/CD pipelines, secure landing zones and cloud posture reviews. Expertise when integrating third ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...