76 to 100 of 323 Incident Response Jobs in the UK excluding London

leading remediation activities that improve security and resilience. Oversee secure remote and supplier access, ensuring third-party connectivity is appropriately governed and monitored. Support incident response and recovery planning for identity-related events, including break-glass access and restoration activities. Produce meaningful reporting and assurance evidence for governance … authentication, access governance, audit, recertification and operating effective identity controls within a regulated environment. Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply ...

Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve vulnerability management and threat detection Support secure design and architecture across infrastructure and cloud …/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based out of the Lutterworth offices ...

partnered with a growing cyber security business in Buckinghamshire, supporting customers with threat monitoring, incident response, and managed security services. They are looking for a Level 3 SOC Analyst to join their experienced SOC team, leading complex investigations and acting as the technical escalation point for major security … develop detection rules, automate workflows, and continuously improve SOC operations The ideal Level 3 SOC Analyst will have: Strong commercial experience within a SOC, incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM ...

report to the Cyber Operations and Engineering Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity , Incident Response , and Disaster Recovery . You will work closely with multiple teams across the IT department and the wider business to ensure that … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

Cyber Essentials) Experience overseeing governance, risk, and assurance activities Broad technical understanding across networks, cloud, infrastructure Hands-on experience leading or coordinating cyber incident response Ability to translate technical risk into clear, business-focused messaging Experience producing reports, dashboards, and presenting to senior stakeholders Strong people leadership skills … System (ISMS) Ensure alignment with standards such as ISO 27001 and Cyber Essentials Identify, assess, and mitigate cyber risks, maintaining the risk register Lead incident response capability, ensuring plans are tested and effective Monitor the threat landscape and advise on emerging risks and mitigations Manage and develop ...

seeking a DFIR Lead Cyber Operations Analyst at VP level in Knutsford. In this key role, you will deliver advanced digital forensics and incident response while leading complex investigations. You will collaborate with internal teams and law enforcement, and produce clear reports under pressure. Ideal candidates will have ...

maturity toward CTEM, and strengthen our Exposure Management model. You’ll ensure alignment with security policies, standards and regulatory requirements, while maintaining and enhancing incident response plans, documentation, risk assessments and remediation records. You’ll also play an active role in training and awareness to promote strong security … hygiene across the organisation. Qualifications To succeed, you’ll bring relevant experience in vulnerability management, risk analysis and incident response, supported by certifications such as CISSP or CISM, plus a degree or equivalent experience in Information Security, Computer Science or a related field. #J-18808-Ljbffr ...

/7 security operations team across a multi-client MSSP environment. You will act as the senior technical authority for threat detection, incident response, and operational excellence, while mentoring analysts and driving innovative SOC improvements. You will stay hands-on, lead complex escalations, refine playbooks, and collaborate with … Threat Intelligence, Engineering and Incident Response to deliver high-value security #J-18808-Ljbffr ...

Life on the team As the Cyber Incident Readiness Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving the end-to-end security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters. You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response and testing. This includes designing and running realistic incident ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3rd tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3rd tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3 tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3 tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

platforms. Drive AI security and observability: Build out dedicated auth/permissions for internal AI agents, establish deep monitoring/observability pipelines, and define incident response protocols for AI‐specific anomalies. Verification and Red Teaming: Lead continuous verification efforts and red teaming exercises to proactively identify vulnerabilities, prompt … that accurately reflect the real‐world performance and safety of our internal‐facing AI tooling and harnesses. Resilient Internal Infrastructure: AI security, monitoring, and incident response are treated as first‐class citizens, ensuring that any erratic agent behaviour in our internal platforms is immediately caught and mitigated before ...

looking for a DFIR Lead Cyber Operations Analyst, a VP-level role focused on cyber defense. This position demands expertise in digital forensics and incident response, and the ability to analyze malware and network activity while effectively communicating findings. The ideal candidate will excel under pressure, possess leadership ...

operates large-scale defensive capabilities for a major UK bank. The role drives strategic direction in cyber defence, detection engineering, threat hunting and incident response, while steering improvements across security platforms, tooling and processes. #J-18808-Ljbffr ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD. Technology & Service Development Evaluate and implement boundary security technologies and tools. Design automation and orchestration for boundary security operations. Lead ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands‐on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands‐on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in Real Time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...