1 to 25 of 83 Incident Response Jobs in the West Midlands

## Incident Response SpecialistApply: Warwick, CV34 6DA: Wokingham, RG41 5BN: Full time: Posted Today: End Date: October 7, 2026 (6 days left to apply): JR100833**About the Role**Exciting opportunity to join the **Security Incident Response Team**, part of the Security function within DD&T. … effectively respond to **cyber** and **physical** security incidents;* Mitigating potential **security threats** by identifying lessons learned and translating these into business improvements;* Developing Incident Response **readiness plans** and processes;* **Exercising** and **testing** to ensure NESO is prepared to respond to the security threats we face. The Incident ...

take your cyber security expertise to the next level? Our client, a leader in the energy sector, is on the lookout for an Incident Response Specialist to join their dynamic cyber security team. Role: Incident Response Specialist Duration: 6 Months (ext. options) Location: Warwick (Hybrid … mindset, promoting shared responsibility among Security Operations teams. Your contributions will be vital in defending against an ever-evolving threat landscape. Key Responsibilities Include: Incident Response: Triage and manage high-priority incidents while ensuring appropriate responses are executed. Produce clear incident summaries quickly and adapt your communication ...

take your cyber security expertise to the next level? Our client, a leader in the energy sector, is on the lookout for an Incident Response Specialist to join their dynamic cyber security team. Role: Incident Response Specialist Duration: 6 Months (ext. options) Location: Warwick (Hybrid … mindset, promoting shared responsibility among Security Operations teams. Your contributions will be vital in defending against an ever-evolving threat landscape. Key Responsibilities Include: Incident Response: Triage and manage high-priority incidents while ensuring appropriate responses are executed. Produce clear incident summaries quickly and adapt your communication ...

from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security … Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across operational environments — while also playing a key role in incident response when OT/IoT-related incidents occur. Key Responsibilities Build and develop the organisation's OT/IoT security capability from ...

National Energy System Operator Limited is seeking an experienced Incident Response Specialist to join the Security Incident Response Team, working across cyber and physical security incident management. The role leads responses to high-priority incidents, triages events, and supports junior colleagues while coordinating with internal ...

Join OneAdvanced Mandate: To lead OneAdvanced's Infrastructure Operations function across AWS, Azure, and private cloud — building a resilient, incident-free platform estate, scaling a high-performing team of infrastructure engineers, and driving the shift toward an Agentic ZeroOps model that puts AI-assisted and autonomous tooling to work … Azure, and private cloud. As Director, Infrastructure Operations, you'll lead this function in Bangalore: owning platform and cloud operations end-to-end, driving incident management and resilience, defining the processes that keep a fast-growing infrastructure estate under control, and building a team of 15–20 infrastructure engineers ...

stays hands-on. You'll manage a team of Information Security professionals and a group of security vendor partners. You'll drive improvements in incident response, cyber resilience, governance, risk management and security awareness. The role is highly visible, and you'll work closely with senior stakeholders … capability Managing, coaching and developing a team of Information Security professionals Managing security vendor partners and making sure they deliver Owning and improving security incident response, including communications and recovery Leading security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards ...

Training's government-funded Cyber Security course is your shortcut to breaking into the cyber security industry. Learn the essentials - threat intelligence, security testing, incident response and legislation - in an interactive online format and earn an NCFE-accredited Level 3 Certificate in Cyber Security Practices. Course details Duration … cyber security principles and threat intelligence Identifying malicious software, vulnerabilities and social engineering tactics Applying effective security testing methods and cyber security controls Developing incident response plans for security breaches Understanding legislation, information security standards and ethical practice in cyber security Potential roles Information Security Analyst Incident ...

configured, resilient, secure, and performant. Beyond day-to-day operational responsibilities, the role carries explicit accountability for network architecture, strategic design, and cross-functional incident response. This role also attracts a market pay supplement of £6650 per annum (to be reviewed in February 2027). Main duties … routing, switching, wireless, WAN, load balancing, IPAM, DNS and DHCP services, alongside Extreme Networks Fabric Engine, Site Engine and wireless platforms. Network Security, Resilience & Incident Management Provide technical leadership for network security and operational resilience across the UKHSA estate. Administer Palo Alto NGFW, Panorama, VPN, micro-segmentation ...

secrets management and infrastructure provisioning. Service Reliability: Define and implement SLIs, SLOs, and SLAs to ensure the stability and performance of critical services. Observability & Incident Management: Oversee the full monitoring stack and establish formal incident response and post-mortem processes. Security & Compliance: Enforce "security by design … problem-solving. Skills: Platform Engineering: Building developer-centric tools to increase engineering velocity. Cloud Governance: Managing multi-provider cloud footprints and resource optimisation. Incident Response: Leading high-pressure incident resolution and system recovery. Mentorship: Coaching senior engineers and developing future technical leaders. Process Design: Crafting standardised, scalable ...

help secure Britain's energy. About the role: A crucial part of our Cyber Threat Detection team, the SOAR Engineer (security orchestration and automated response) ensures that National Gas can continuously keep up-to-date with new and emerging threats and ensures we can detect and respond to them. … Enable the Computer Security Incident Response Team (CSIRT) to detect threats targeting the organisation through enrichment, tuning and automation, allowing the CSIRT to be more effective. Mature the cyber security posture of the business by leveraging automation and orchestrated response. Key accountabilities: Subject Matter Expert for all things ...

mover/leaver processes. Protect against the threats that hit ecommerce, from account takeover and phishing to payment fraud and supplier compromise. Build our incident‐response capability and lead the response to incidents and suspected data breaches. Lead the business to Cyber Essentials Plus and towards … Strong Google Workspace administration, plus experience with MDM and implementing SSO and MFA. Practical knowledge of identity and access, endpoint security, vulnerability management and incident response, including real incidents. Evidence of building with AI and automation, with comfort in scripting (Python, TypeScript, shell) and APIs. Working knowledge ...

make active use of AI coding assistants to accelerate infrastructure and automation work. While ownership of the security posture, disaster recovery, business continuity, and incident response sits with the Head of Technology Delivery, you will play a central role in implementing and maintaining the controls, backups, and monitoring … that underpin these, and in supporting incident resolution when issues arise. The reliability, performance, and efficiency of the platform depend directly on the quality of the work you do, making this a role of significant technical responsibility. The business is a well-funded business with excellent revenues ...

Monitor, Log Analytics, alerts, and dashboards . Support enterprise infrastructure initiatives involving Microsoft 365, Active Directory, and security remediation . Participate in change management, incident response, maintenance windows, and occasional on‐call support. Document infrastructure, configurations, processes, and troubleshooting procedures. What You’ll Need to Be Considered … communicate technical issues and solutions clearly. Strong documentation, organization, time management, and collaboration skills. Willingness to participate in occasional after‐hours maintenance or incident response as needed. #J-18808-Ljbffr ...

ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data Ingestion … performance of the SIEM infrastructure. Security Engineering Contribute to security engineering projects, transitions, and transformations. Work closely with security operations and associated security incident response systems Stay informed about emerging threats and security best practices. Essential Skills/Experience Proven experience in SIEM Detection Engineering. Experience using cyber ...

busy team in the United Kingdom. You will bring a minimum of five years' SOC experience, mentor junior staff, and contribute to rapid incident response and threat detection. This role emphasizes hands-on SIEM work (Splunk, MS Sentinel), log analysis (Wireshark), and strong knowledge of Windows and Linux ...

engineering, detection engineering, SIEM/SOAR, security automation and AI-driven security operations . You’ll design and improve security monitoring, detection, response and automation capabilities across a large enterprise environment, with a particular focus on AI and agentic technologies . Key Responsibilities Design and optimise security monitoring, SIEM … including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build SOAR playbooks, automated response workflows and security integrations . Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud security tools . Support incident response ...

across our retail stores and eCommerce platform. Working closely with the Security Operations Manager and cross-functional engineering teams, you will drive daily threat response, proactive threat hunting and security control improvements. We offer a hybrid working setup balancing office life with home flexibility, alongside continuous opportunities to collaborate … Take On: Manage and mentor a team of up to 10 Security Analysts, overseeing daily workloads, shift rotas and development reviews. Lead incident response and remediation efforts as the primary escalation point, ensuring alerts are investigated within defined SLAs. Oversee forensic evidence collection and collaborate with Threat Management ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

penetration testing, and managing firewalls and security protocols. The ideal candidate will have experience with compliance standards like GDPR and ISO, capable of developing incident response procedures, educating staff on cybersecurity, and ensuring business continuity. This role is based in Birmingham, UK and offers opportunities for professional growth. ...

Single Sign-On (SSO) solutions. * Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise platforms. * Support identity threat detection, incident response, monitoring, and automation activities through IAM and PAM integrations. Key Skills & Experience: * Experience in Identity and Access Management (IAM), Privileged Access Management … Understanding of Role-Based Access Control (RBAC), least-privilege principles, and Zero Trust security concepts. * Experience in identity security monitoring, identity threat detection, and incident response practices. * Proficiency in PowerShell Scripting and automation for IAM/PAM administration and integration activities. This is an excellent opportunity ...

assurance Produce clear, well-structured audit and assessment reports with practical, prioritised recommendations Provide calm, pragmatic advice during reactive scenarios, including Data breaches and incident response; Regulatory notifications and communications; and Data subject rights requests (access, erasure, rectification, etc.) Deliver privacy education and training, tailored to different audiences … support Ability to quickly understand different business models, risk profiles, and regulatory environments, and tailor privacy advice accordingly Practical experience handling data breaches and incident response and data subject rights requests Experience assessing AI and automated processing activities involving personal data, including understanding risk, transparency, and accountability considerations ...

organization's OT/IoT security capability from the ground up. You will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments. You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture ...

with Netcom Training’s fully-funded Level 3 NCFE Certificate in Cyber Security Practices. Gain hands-on skills in threat intelligence, security testing and incident response to prepare for cyber security and IT opportunities in Greater Manchester. Previous learners have progressed into roles including Cyber Security Analyst … security principles. Threat Intelligence - Develop expertise to identify risks and analyze threats. Vulnerability Testing - Conduct cyber security testing, identify vulnerabilities, and implement controls. Incident Response - Prepare for and respond to live cyber security incidents. Ethics & Law - Understand legislation and ethical conduct within the cyber security sector. Career Pathway ...

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...