51 to 75 of 210 Incident Response Jobs in the UK excluding London

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

emerging threats Review existing security tools and controls, recommending improvements where required Work closely with infrastructure engineers, external SOC providers and security partners on incident response and cyber resilience What we are looking for: Around 2-3+ years of commercial cyber security experience Hands on experience within … Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra ID, PIM, MFA or SSO Broader knowledge of Microsoft Azure and cloud security Strong communication skills ...

root cause analysis, and implementation of corrective actions to maintain service reliability and security. Required Skills: * 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you'll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … through technology. You will be responsible for Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security-related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

security and reducing organisational risk through proactive security engineering. This is not a traditional SOC position. Whilst you'll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud platforms. What … governance controls using Microsoft Purview Work closely with infrastructure, cloud and project teams to embed security into new and existing technology solutions Contribute to incident response activities and ongoing improvements to detection capabilities Provide technical security guidance to both technical and non-technical stakeholders Support compliance against recognised ...

Manage and coach a small team of Information Security professionals. Manage and drive effective performance of multiple security vendor partners. Own and enhance security incident response processes and recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including … will need: Proven experience leading a Cyber Security, Cyber Defence or Information Security function within a complex organisation. Strong knowledge of security operations, incident response, risk management and security governance. Experience developing and implementing security policies, controls and security improvement programmes. Excellent stakeholder management and communication skills, with ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

tools such as Dynatrace and Google Cloud Operations. Conduct technical design reviews, code reviews, production-readiness reviews and post-implementation validation. Provide production support, incident response and root-cause analysis for the API platform and customer services. Ensure that solutions meet security, control, resilience and operational-readiness requirements. … enterprise tooling. Strong understanding of GCP networking, DNS, IAM, service accounts, TLS, private connectivity, load balancing and troubleshooting. Experience supporting production services, including monitoring, incident response, root-cause analysis, rollback and post-change validation. Strong Linux skills and practical scripting or development experience using Python, Bash, JavaScript, Node.js ...

Cyber Governance, Risk, and Compliance Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity, Incident Response, and Disaster Recovery. You will work closely with multiple teams across the IT department and the wider business to ensure that resilience strategies … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

investigating and responding to threats while strengthening the controls that protect our systems, networks and data. Your responsibilities will span security monitoring, risk review, incident response and liaison with local and national partners. You will also contribute to the wider ICT service, including Microsoft 365 administration, infrastructure updates … Security Analyst - Key Responsibilities: - Monitor security systems, identify and investigate cyber threats, and respond to incidents while maintaining clear documentation and up-to-date incident response procedures - Design, implement, maintain and monitor security measures across systems and networks, including firewalls, intrusion detection, anti-virus, authentication, log management ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive ...

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...

Systems, covering all aspects of system security and resilience including strategy, policies, standards, compliance and assurance across the business. You will manage risk, support incident response and investigations, and work closely with the Cyber Security Manager. If you have the relevant experience (please see below) and are looking … cyber security policies and procedures. Conducting regular risk assessments, audits and testing to identify vulnerabilities and document improvements. Supporting the Cyber Security Manager with incident response and investigations into security breaches. Coordinating Management of Change activities and engineering risk assessments, and carrying out technical RCA investigations. Managing control ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers. Responsibilities Maintain and improve security … system owners and confirm that corrective actions are effective. Investigate security alerts and incidents, coordinating with internal teams and external security specialists. Maintain practical incident-response procedures, escalation routes and supporting documentation. Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable ...