451 to 475 of 937 Incident Response Jobs in the UK excluding London

will contribute to infrastructure decisions and service architecture within our Azure environment, support observability, monitoring and alerting for production services, and participate in incident response and root cause analysis when issues arise. You will take end-to-end ownership of features from technical design through to delivery ...

engagements across the full stack — from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/CD pipelines, secure landing zones and cloud posture reviews. Expertise when integrating third ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

engagements across the full stack - from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/CD pipelines, secure landing zones and cloud posture reviews. Expertise when integrating third ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group as a trusted technical ...

opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group as a trusted technical ...

security of new services,suppliersand system changes before they go live We are looking for someone with strong experience in cloud security, identity, dataprotectionand incident response. You will need sound judgement, good analyticalskillsand the ability to explain security risks and recommendations clearly to technical and non-technical colleagues. What ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection.Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery.Toil Reduction & Automation: Actively ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO and will ...

Information Security Analyst - SecOps Response position, you will document notes, analysis findings, containment steps, and cause for each security incident. The work Document notes, analysis findings, containment steps, and cause for each security incident Working details Work model: Hybrid Location: London, Cardiff Salary: Access to initiatives like Cycle … asking that you attend the office a minimum of 1 day per week , but it’s not essential 3+ years experience in a cyber incident response and digital forensics function You’ll need experience in cloud forensics (GCP, AWS) We have a Hybrid approach to working here ...

recruit a Cyber Resilience Specialist to support a high-profile Operational Resilience programme.This role will focus on linking cyber threats, vulnerabilities, security controls and response scenarios to business service impacts and Operational Resilience outcomes. The successful candidate will work closely with security, technology operations, risk teams and service owners … tolerance assessments and resilience planning. Provide clear recommendations and actionable improvements to strengthen resilience capabilities. Essential Skills & Experience Experience in Cyber Resilience, Cybersecurity Operations, Incident Response, Threat Management or Vulnerability Management. Strong understanding of security controls, SOC operations, detection, response and recovery processes. Experience translating technical cyber ...

support skills, careers and economic development across Scotland. You'll drive the evolution of our Security Operations Centre, lead a team of analysts, shape incident response capabilities, and help define cyber security strategy across the partnership. Working with technologies including Microsoft Sentinel, Defender, Entra ID, Purview, Intune … Manage and coordinate major cyber incidents and investigations. Work closely with our managed SOC provider to enhance security capabilities. Improve threat detection, monitoring and response processes. Influence cyber security strategy and risk management across the partnership. Lead cyber exercises, continuous improvement initiatives and service innovation. Translate technical risks into ...

engineers, with a clear path toward technical or team leadership as the U.K. presence scales. Responsibilities Assist in fine-tuning Upwind's detection and response mechanisms. Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements. Lead and conduct in-depth security investigations, including … best practices in cloud security. Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency. Requirements Based in Belfast, NI. This is a hybrid, in-office, 3 days per week role; visa sponsorship is not available. You must ...

security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it.Detection, Response & SOC PartnershipOwn the strategic relationship with our 24/7 outsourced SOC holding them to a high standard on threat hunting, threat intelligence utilisation, and automated … response, not just SLA compliance.Ensure Cognism has a holistic, well-maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves.Build the internal team into a trusted escalation layer, with clear incident response playbooks, rehearsed escalation paths, and a feedback loop that sharpens ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

data transformations Design and optimise KQL queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives … logic design and tuning Logic Apps, Playbooks and SOAR automation Azure DevOps/Git CI/CD pipeline implementation Strong grounding in security monitoring, incident response and threat hunting Strong troubleshooting and root cause analysis skills Desirable SANS SEC503 – Network Monitoring and Threat Detection Candidates must hold active ...

technology services across a multi-site organisation. The chosen Candidate will be responsible for TechBar and desktop support, hardware and software asset management, major incident response and the performance of third-party technology support providers. This is a key operational leadership role, combining service delivery, supplier management … standards, monitoring performance and leading regular service reviews. Own hardware and software asset management, including lifecycle, stock, deployment and licence compliance. Lead the technology response to P1 and P2 major incidents, coordinating resources, communications and resolution. Drive post-incident reviews, root-cause analysis and continuous improvement. ...

automation Manage Azure Key Vault, secrets, and certificate lifecycle processes Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, cloud operations, or managed services …/or ARM templates Azure DevOps and CI/CD pipeline experience Scripting and automation experience using Bash and/or PowerShell Strong troubleshooting, incident management, and problem-solving skills Why Join? Work with modern cloud, automation, and DevOps technologies Play a key role in driving Infrastructure-as-Code ...

maintenanceOperational support of platform services (e.g. PAM, PKI, cross-domain solutions) in live environmentsPlatform administration including patching, upgrades, configuration, and account managementMonitoring, alerting, and incident response for platform servicesIncident and problem management, including troubleshooting and root cause analysisNetworking concepts (TCP/IP, DNS, DHCP, firewalls)Automation and scripting … services, or cross-domain/secure transfer solutionsUse of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)ITIL-aligned service management practices (incident, problem, change)Automation of operational activities (scripts, scheduled jobs, runbooks)Experience working in high-availability or 24/7 service environmentsIntegration with enterprise services (Active ...

client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments. Key Requirements: Proven commercial … such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar. Exposure to vulnerability management and working with technical teams to remediate findings. Comfortable supporting incident response activities, including triage, investigation and containment. Experience using SIEM and security monitoring tools for alert analysis and threat detection. Strong communication skills ...

identify misconfigurations and drive them to closure. Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops. Support incident response efforts by assisting with root cause analysis (RCA) or incident containment. Analyze and Report Findings Analyze assessment and testing results to identify ...

Develop & Improve cyber security policies, standards and governance processes. ~Analyse & Recommend security controls aligned with recognised frameworks and best practice. ~Support & Strengthen business continuity, incident response and operational resilience capabilities. ~Collaborate & Deliver trusted cyber security advice to clients across multiple sectors. ~Apply & Interpret threat intelligence to inform security … management and assurance. ~Good understanding of data protection and privacy principles. ~Knowledge of security change management practices. ~Experience supporting business continuity, operational resilience and incident response. ~Understanding of networks, core infrastructure and enterprise systems. ~Excellent planning, communication and stakeholder management skills. Desirable qualifications: ~CISSP ~CISM ~ChCSP #LI-JS2 Together ...

closely with stakeholders across Legal, Security, Technology, Product, HR and other business functions, the Program Manager will drive program execution, coordinate key initiatives, support incident response and audit readiness, and help mature RWS's approach to privacy, AI governance and information security. The successful candidate will bring … Trust initiatives, including governance frameworks, compliance toolkits and awareness programmes. Administer and optimise privacy and governance tools, including OneTrust and related workflows. Coordinate privacy incident management activities in partnership with Security and Technology teams. Act as the operational point of contact for privacy audits, both client‐facing and internal ...

cyber security incidents,risksand technical issues. Managing and developing a team of Systems Engineers, coordinating workloads, mentoringstaffand supporting career progression. Leading or supporting cyber incident response activities, including investigation, containment, eradication, recovery, root causeanalysisand lessons learned reviews. Overseeing vulnerability management activities, threat monitoring, security assessments, patchprioritisationand remediation planning. … improvement. Additionalinformation This role includes participation in an on-call rota and out-of-hours support for critical incidents, planned maintenance activities and emergency response requirements. #J-18808-Ljbffr ...