1 to 25 of 28 Incident Response Jobs in Wales

listed below. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

growing Security Operations function, with a strong focus on Microsoft Defender XDR and Microsoft Sentinel. The role covers security engineering, detection development, vulnerability management, incident response, and Microsoft 365 security, with direct client exposure. This is a primarily remote position with occasional attendance at the London or Cardiff … associated risks. Produce structured security reports and recommendations. Present technical findings to clients and stakeholders. Support client remediation and security improvement activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic ...

respond to, recover from and learn from cyber incidents. This is a varied position combining hands-on technical recovery testing with Business Continuity, Incident Response and Cyber Recovery planning. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Defining, implementing, and maintaining corporate security policies, standards, and procedures to ensure compliance with industry regulations, legal requirements (e.g., GDPR, HIPAA), and best practices. Incident Response and Management: Playing a key role in developing incident response plans and coordinating efforts to detect, analyse, and respond ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

emerging threats Review existing security tools and controls, recommending improvements where required Work closely with infrastructure engineers, external SOC providers and security partners on incident response and cyber resilience What we are looking for: Around 2-3+ years of commercial cyber security experience Hands on experience within … Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra ID, PIM, MFA or SSO Broader knowledge of Microsoft Azure and cloud security Strong communication skills ...

security and reducing organisational risk through proactive security engineering. This is not a traditional SOC position. Whilst you'll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud platforms. What … governance controls using Microsoft Purview Work closely with infrastructure, cloud and project teams to embed security into new and existing technology solutions Contribute to incident response activities and ongoing improvements to detection capabilities Provide technical security guidance to both technical and non-technical stakeholders Support compliance against recognised ...

organisational data and services Providing expert advice on secure environments, configuration management and infrastructure hardening Supporting identity and access management, vulnerability management, monitoring and incident response activities Maintaining resilient and highly available services in line with departmental policies and security standards Driving continuous improvement and automation to enhance … design Experience with infrastructure hardening, configuration management and vulnerability management Knowledge of identity and access management principles and security best practice Understanding of monitoring, incident response and operational risk management Ability to identify opportunities for automation and continuous service improvement Excellent communication skills, with the ability to provide ...

Cyber Governance, Risk, and Compliance Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity, Incident Response, and Disaster Recovery. You will work closely with multiple teams across the IT department and the wider business to ensure that resilience strategies … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

pipelines to support safe, consistent delivery across environments. Maintaining and improving observability across the platform estate, including monitoring, logging, alerting, and dashboards. Supporting technical incident response and post-incident reviews, contributing to problem management and long-term remediation. Maintaining platform security standards, including access control reviews, vulnerability … Elemental services such as MediaLive, MediaConvert, and MediaPackage. Supporting live events and broadcast-critical streaming services, including monitoring, quality assurance, and incident response. Income-generating platform work Contributing to the development and operation of server-side ad insertion capability and other income-generating platform initiatives. Supporting the technical delivery ...

proposed technology changes and provide recommendations to stakeholders. Promote security awareness and influence teams to adopt security best practices. Assist with cyber security incident response by identifying architectural weaknesses and recommending improvements. Continuously monitor emerging cyber threats, vulnerabilities, technologies, and regulatory changes to improve the organisation's security ...

maintain secure, resilient infrastructure and platform services Champion security best practices across infrastructure design, configuration, and operations Support infrastructure hardening, vulnerability management, monitoring, and incident response activities Implement and maintain Infrastructure as Code solutions Collaborate with engineering, architecture, and security teams to improve platform reliability and security posture … working within complex enterprise environments Strong stakeholder engagement and problem-solving skills Desirable Experience Experience working within government or highly regulated environments Exposure to incident management and operational support activities Understanding of compliance-driven infrastructure delivery ...

Desirable) environments. You’ll be relied on to: Work with the Cyber Security Team to enhance the organisation's threat monitoring, detection, and incident response capabilities. Own the implementation, maintenance, and continuous improvement of the cyber security estate, covering user, infrastructure, cloud, application, and OT assets. Consult ...

designs and platform initiatives. Delivery & Problem-Solving Take ownership of well-scoped platform tasks, upgrades and new capabilities from development through to delivery. Support incident response, troubleshooting, and root-cause analysis, escalating more complex issues when appropriate. Participate in technical and design discussions, contributing ideas and practical solutions. ...

hosted workloads Demonstrable experience having worked on AWS builds (standing up new infrastructure, IaC, migrations) as well as ongoing operational/support work (troubleshooting, incident response, day-to-day maintenance) Solid working knowledge of observability: metrics, logs, traces, and how to design or tune alerting and dashboards Comfortable ...

engagement. Contribute to the Scrumconnect developer community and promote the adoption of good engineering practices. Act as a senior on-call responder, supporting incident management and driving long-term resilience and reliability improvements. Collaborate with product managers, designers, architects, developers, testers, and other stakeholders to deliver user-focused digital … principles and secure-by-default engineering. Experience with systems design and integration in complex environments. Comfortable supporting services in production, including on-call participation, incident response, troubleshooting, and observability. Experience using development and collaboration tools such as Jira, Confluence, and Bitbucket . User-focused mindset and experience collaborating ...

Microsoft Sentinel Managing phishing simulation campaigns and supporting vulnerability scanning Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture Supporting incident response activities and security investigations Producing clear technical reports, recommendations and documentation Working with senior engineers to triage and escalate more complex technical ...

security capabilities across Microsoft Sentinel and Defender XDR, working directly with clients to strengthen their environments. This is a hands-on engineering position, with incident response involvement focused on escalations rather than routine alert monitoring. The role Build, deploy and tune Sentinel detection rules using KQL. Configure … optimise Microsoft Defender XDR and wider Microsoft 365 security controls. Develop automation and response playbooks using Azure Logic Apps. Run vulnerability scans and phishing simulations, translating findings into practical recommendations. Contribute to development and deployment processes using DevOps and CI/CD. Share knowledge with colleagues and participate ...

that systems remain aligned with internal security policies and regulatory expectations. Alongside supplier management, you’ll oversee core systems and user access management, support incident response activities and maintain business continuity and disaster recovery readiness. The role will also involve supporting internal audits, regulatory reviews and technology governance ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

proactive and organised Operational and Technical Support Officer to play a key role in supporting Natural Resources Wales' (NRW) environmental monitoring programmes and incident response activities. Working closely with NRW Analytical Services and field sampling teams, you will provide technical, logistical and operational support to ensure the effective … central hub for environmental monitoring and evidential samples, NRWAS receives and processes hundreds of samples each week to support both routine monitoring and incident investigations. The team also coordinates sample dispatch to specialist laboratories, supplies sampling equipment and provides technical support to colleagues across NRW. Joining NRWAS means becoming ...

assessing the risk associated with proposed changes. Inspire and influence others to execute security principles, communicating widely with other stakeholders. Assist, where necessary, with incident response processes to identify architectural issues and solutions. Proactively engage with internal and external partners, stakeholders and peers to develop your knowledge ...

work setup with occasional London or Cardiff office visits. You will design and optimise security controls, develop detections, manage vulnerability assessments, and contribute to incident response. #J-18808-Ljbffr ...

proactive and organised Operational and Technical Support Officer to play a key role in supporting Natural Resources Wales' (NRW) environmental monitoring programmes and incident response activities. Working closely with NRW Analytical Services and field sampling teams, you will provide technical, logistical and operational support to ensure the effective ...