Trabajos incident response en WatfordCrear alertas

SOC Shift Lead - Watford, UK \n \n\n • Package of up to £78,000 Depending on Experience\n, • Full time onsite role - shift work\n, • Active SC clearance required, and you must be eligible for DV\n\n \n ABOUT THE CLIENT \n Our client is a well-established cyber security organisation delivering managed security services to customers operating within highly secure and mission critical environments. \n \n They continue to invest heavily in their Security Operations Centre capability and are now looking for an experienced SOC Shift Lead to strengthen their technical leadership team. \n \n THE BENEFITS \n\n • Opportunity to work on high-profile security operations\n, • Career progression within a growing cyber security team\n, • Ongoing technical training and certification support\n, • Exposure to enterprise and critical national infrastructure environments\n\n \n THE SOC SHIFT LEAD ROLE \n As SOC Shift Lead, you will oversee the operational delivery of a busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations. \n \n You will also: \n\n • Lead Major Incident investigations and technical response activities\n, • Analyse advanced network, endpoint and cloud security events\n, • Drive improvements to detection logic and operational processes\n, • Coach and develop SOC Analysts through real-time guidance and regular feedback\n, • Work closely with engineering teams to enhance detection capabilities\n\n \n SOC SHIFT LEAD ESSENTIAL SKILLS \n\n • Previous experience as a Senior SOC Analyst, SOC Team Lead or SOC Shift Lead\n, • Strong experience leading complex cyber security investigations\n, • Commercial experience with Microsoft Sentinel and Splunk Enterprise Security\n, • Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence\n, • Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies\n, • Experience analysing Windows, Linux, endpoint, identity, network and cloud security logs\n, • Ability to mentor and develop technical teams\n, • Active SC Clearance, eligibility for DV\n\n \n TO BE CONSIDERED \n Please either apply through this advert or emailing me directly via

Trainee Cyber Security Course Programme – Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as £142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: £28,000 – £38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Complete online training designed to take you from zero experience to your first Cyber Security role. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The program

Allwyn is seeking a Site Reliability Engineer to support the reliability and performance of our digital services. You will collaborate with senior SREs and engineering teams to drive automation, incident response, and improvement of runbooks, while contributing to platform reliability and user exper

You will work with the IT Governance and Security Manager to support cyber strategy and administer security systems. MORGAN PHILIPS UK LIMITED in Watford is seeking an IT Security Analyst to protect the business from cyber threats.

Sopra Steria Ltd is recruiting a Lead SOC Analyst to head a 24/7 Security Operations Centre, conduct investigations, and drive incident response. You’ll mentor analysts and strengthen detection across client environments, with hands-on threat hunting and escalation leadership.

The programme is completely beginner-friendly, so no experience is needed. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. Apply now for the next available cohor

Company Profile CBRE is the global leader in real estate services and leverages the industry's most powerful knowledge base to meet the commercial real estate needs of its clients worldwide. Our vision is to be the preeminent, vertically integrated, globally capable real estate service firm. Globally we employ over 70,000 employees and operate in 48 countries. Job Title: Electrical Bias Engineer CBRE Global Workplace Solutions is a leading global provider of integrated facilities and corporate real estate management. We are recruiting an Electrical Engineer to join the team located in Borehamwood The successful candidate will be able to install and maintain new plant and equipment when required, ensuring that plant faults and defects are swiftly rectified. Role Summary: React to breakdown maintenance requests within the required SLA's Technical awareness of computer room/call centre/trader operations and experience of power, UPS, CPS, distribution, cooling etc Repairs to modular UPS systems Test and diagnose power quality issues including harmonic distortion using onsite power analysers Able to apply a risk focused maintenance approach and operations of plant and systems in data centres/critical environments Provide emergency response standby, call out Escalate urgent issues identified through to the Technical Services Manager Respond to work interruptions, outages or emergencies consistent with the SLA Responsibility for ensuring all critical related engineering maintenance documentation & records are kept updated Advise the Facilities Management Team of changes in critical environment requirements Must be willing to work over & above contractual hours. Undertake site surveys & produce Works Requests, Method Statements & Risk Assessments for planned works Undertake Upgrade & Install work Understand and interpret technical drawings / instructions / processes & O&M's Ensure completion of all reactive Helpdesk Requests Monitor and analyse environmental conditions, review the loading/working conditions of critical equipment regularly Ensure that financial processes are adhered to at all times Complete an incident report for all abnormal incidents affecting systems availability (draft prepared within 24 business hours of an incident) Determine the root cause and action items required to restore availability and prevent a recurrence Review and submit to the Technical Services Manager ensuring all actions are documented reviewed and completed Entering relevant quotes and remedial works onto the in-house system Experience Required: Essential 18th Edition Electrical Wiring RegulationsDesirable Experience working with building management systems including fault finding and operator use Experience with VAV systems, FCU systems, passive and active chilled water circuits and chilled beams Experience and understanding of HVAC systems Understanding of a CDM process Excellent facilitation, communication skills at all levels Evidence of Excellent Customer Service Delivery Able to organise self to manage assigned tasks, determine material requirements. Experience of H & S procedures & requirements. COSHH, Working at Heights, Risk Assessment etc. Health & Safety Qualified i.e. IOSH and/or NEBOSH Testing and Inspection of Electrical systems Knowledge of emergency response/standby/call out activities and protocols Understand the monitoring of utilities and environmental programmes Be or have been an Authorised Person e.g. (AP15/12) Water hygiene L8

Job specification for the position of: Cyber Security Analyst Reporting to: IT Governance and Security Manager *OFFICE BASED IN WATFORD - FIVE DAYS PER WEEK - NON-NEGOTIABLE* Must have a British passport or ILR (Indefinite leave to remain) - *no sponsorship available* Purpose of the role: The cyber security analyst is responsible for the day-to-day tasks which protect the business from cyber threats and attacks. Based in Watford, at head office, this role gives an opportunity to contribute to cyber response and to identify cyber risks, helping IT to protect the company's systems. Role overview: working closely with the IT governance and security manager, contributing to cyber strategy administering IT security systems identifying, mitigating and escalating IT security incidents identifying deviations from IT security standards analysing logs and reporting relevant information reporting trends and threats in e-mail and web traffic, as appropriate analysing security information and producing relevant reports administering and evaluating cyber security questionnaires co-ordinating and scheduling penetration tests managing third-party forensic investigations completing cyber security posture-reporting supporting excellent cyber security design, with the ability to contribute to good cyber security practicesIn detail, the role will involve: log-analysing security posture-monitoring Trellix antivirus-reporting and some EPO management tasks secure physical and electronic destruction of sensitive data helping the business to protect sensitive information (e.g. encrypting data) educating and awareness through spam-testing; supporting the training teams with e-learning monitoring public and third-party feeds for emerging cyber trends performing cyber risk assessments co-ordinating cyber security incidents defining cyber policies and cyber standards assessing third-party suppliers' cyber standards keeping abreast of current and emerging threatsSkills required: understanding log management (at an analysis level only): Microsoft Windows and AD log structure network system log, e.g. Cisco and Checkpoint Office 365 and Defender security knowledge of Splunk the SIEM platform understanding of systems and integrity: Netwrix security solutions administration, including AD Auditor and Change Tracker Trellix and SkyHigh reporting and management, including Trellix antivirus-reporting and DLP using EPO operational security and incident management: experience of cyber security quickly analysing data and making decisions on security threatsSalary and benefits: competitive salary 25 days' paid holiday (plus bank holidays) pro rata; head-office bonus scheme; free shares (after 18 months with the company); private medical insurance; contributory pension scheme Please note you will receive an automated response advising you that we have received your CV. Morgan Philips Group is a global talent solutions business that disrupts conventional thinking in executive search, recruitment and talent consulting. We operate in over 18 markets in Europe, North & South America, Asia, and the Middle East & Africa. We understand that the future is digital and social, so we embrace the latest technology, including video ads and CVs, as well as social recruiting. Our innovative services are tailored to the new world of work yet we do not lose sight of the fact that employees be they existing and potential are ultimately human beings. We are committed to ensuring that all job applicants are treated equally, without discrimination because of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age

You will own the technical direction of security incident response and response readiness across the company. Proven, hands‑on experience leading response to real security incidents. Designing, maintaining, and continuously improving incident response playbooks and runbooks.

You will work with diverse clients to manage incident response from start to finish, providing expert digital forensics guidance and long-term security posture improvements.

London is seeking a senior security incident response lead to own the technical direction of incident response across the company. You will guide investigations, containment, eradication, and recovery, and lead from the front during serious incidents with calm authority.

You will lead the security operations function, develop the SOC team, own incident management, and ensure resources are deployed effectively while strengthening monitoring, threat intelligence and vendor relationships.

Palo Alto Networks is seeking a client-facing Principal Consultant to lead reactive services engagements and manage incident response from start to finish.

A cybersecurity firm based in London is seeking a Senior SOC Analyst (Level 3) to lead incident investigations, manage client communication, and refine detection content within the SOC team.

You will work with diverse clients to manage incident response from start to finish, providing expert digital forensics guidance and long-term security posture improvements.

A cybersecurity firm based in London is seeking a Senior SOC Analyst (Level 3) to lead incident investigations, manage client communication, and refine detection content within the SOC team.

A cybersecurity firm is seeking a Principal Consultant to lead incident response engagements and provide expert guidance. This role requires substantial experience in incident response and digital forensics, along with leadership capabilities.

A cybersecurity firm based in London is seeking a Senior SOC Analyst (Level 3) to lead incident investigations, manage client communication, and refine detection content within the SOC team.

A cybersecurity firm is seeking a Principal Consultant to lead incident response engagements and provide expert guidance. This role requires substantial experience in incident response and digital forensics, along with leadership capabilities.

A cybersecurity firm based in London is seeking a Senior SOC Analyst (Level 3) to lead incident investigations, manage client communication, and refine detection content within the SOC team.

This role requires substantial experience in incident response and digital forensics, along with leadership capabilities. A cybersecurity firm is seeking a Principal Consultant to lead incident response engagements and provide expert guidance.

You will monitor security events, assist with investigations, and support incident response across a 24/7 operations framework in a modern hybrid environment. Hitachi Energy is seeking a Cybersecurity Incident Response Analyst to join our Cyber Defense Center.

You will work with diverse clients to manage incident response from start to finish, providing expert digital forensics guidance and long-term security posture improvements.

You will monitor access, perform vehicle checks and maintain site security, reporting any incidents with clarity and urgency.

This role requires substantial experience in incident response and digital forensics, along with leadership capabilities. A cybersecurity firm is seeking a Principal Consultant to lead incident response engagements and provide expert guidance.

A global tech company in Cambridge is looking for a Physical Security Specialist to enhance their security capabilities.The role involves developing and implementing security strategies, leading site assessments, and managing technology strategy.The ideal candidate will have recognized Physical Secu

You will work with diverse clients to manage incident response from start to finish, providing expert digital forensics guidance and long-term security posture improvements.

Tesco UK is seeking a Technical Programme Manager for Live Incident Response to lead a pivotal safety initiative in retail. You will own end-to-end delivery, coordinating across UX/UI, Product, Engineering and store operations to ensure rapid in-store support during incidents.

While live incident response will be the first and primary responsibility of this role, you may be expected to work on a range of projects/programs that will require engagement with senior leaders, stakeholders and peers from UX/UI, Product & Engineering as well as other Technical Program Managers.

You will monitor INS data, correct errors, and manage third‑party work processes while ensuring SLA adherence and efficient incident support.

Tesco Technology in Welwyn Garden City is seeking a Technical Programme Manager for Live Incident Response to lead a game-changing safety initiative. You will own the programme end-to-end, delivering across multiple teams and ensuring in-store support during critical incidents.

IBM is seeking a Cyber Security Incident Response Analyst to join the CSIRT team. You will conduct highly technical investigations into security incidents, triage digital media, and determine containment and remediation actions in collaboration with various business units.

You will join our Tech team to respond to incidents, drive improvements, and help mature our security operations. You will work with the SOC and wider technology groups to strengthen monitoring, detection and response, lead vulnerability management, and contribute to threat intelligence, detections,

The Head of Security Incident and Response provides operational leadership of the Defra Group Security Incident Response Management (SIRM) capability, ensuring the organisation is prepared for, and able to respond effectively to, security incidents ranging from routine events to significant security

Incident Response Engineer, UK Security Operations, Hampshire. Relevant experience in incident response or security operations. Incident Response Engineer, UK Security Operations, Hampshire.

Are you ready to pioneer a game-changing approach to safety in retail? As the Technical Programme Manager for Live Incident Response, you will be at the forefront of a cutting-edge initiative designed to revolutionise how our colleagues access support when it matters most. You will own and drive the

You will monitor alarms and incidents, coordinate escalations, and produce detailed incident reports while assisting colleagues across the Santander estate. Wilson James is seeking an Intelligence and Incident Response Co-ordinator to join our Security Operations Centre, supporting Santander's Head

The role emphasizes incident response leadership and collaboration with global teams to ensure reliability and performance.

Tesco is seeking a Technical Programme Manager for Live Incident Response to shape and deliver a high-impact safety initiative across retail stores. You will own end-to-end delivery, collaborate with UX/UI, Product, Engineering, and leadership, and coordinate in-store deployments to enable in-the-mo

This role offers the opportunity to evolve and scale SOC capabilities, ensuring effective incident detection and response.

You will develop, implement and sustain security measures across our infrastructure and lead incident response efforts.

You will own the live incident programme end‑to‑end, coordinating across stores and in‑store installations to ensure immediate support when incidents arise and measurable impact for the business. Tesco UK in Welwyn Garden City is hiring a Technical Programme Manager for Live Incident Response

Government Recruitment Service in York is seeking a Head of Security Incident and Response to lead the Defra Group's Security Incident Response Management (SIRM) capability, ensuring preparedness and effective response to incidents from routine events to major breaches. As senior lead, you will over

Are you ready to pioneer a game‑changing approach to safety in retail? As the Technical Programme Manager for Live Incident Response, you will be at the forefront of a cutting‑edge initiative designed to revolutionise how our colleagues access support when it matters most. You will own and drive

You will monitor threats, respond to incidents and strengthen security controls using Microsoft Defender and modern security platforms.