2,189 Security Incidents jobs in the United Kingdom
Head of IT Security Incident and Threat Management - Solihull
Posted 1 day ago
Job Viewed
Job Description
Head of IT Security Incident and Threat Management - SolihullnCrimson and IMI have joined forces to build IMI's new security team, and we are looking for talented individuals to join us on this exciting journey. If you are passionate about IT security and want to be part of a dynamic team that is shaping the future of security within a successful global company, we want to hear from you!nWe are seeking a highly skilled and experienced Head of IT Security Incident and Threat Management to join our team. In this role, you will be responsible for leading the strategic efforts to safeguard the company's digital assets against potential threats and incidents. This role requires a seasoned professional with a deep understanding of cybersecurity, incident response and threat management within a FTSE 100 environment.nThe salary on offer for this position is between £90,000 and £10,000 per annum plus benefits.nPlease note this role is based on site for the first 3 months followed by a hybrid working arrangement.nResponsibilities
Develop and implement comprehensive incident response strategies to address security threats swiftly and effectivelynLead the threat and intelligence program, ensuring timely detection and mitigation of cyber risksnEnsure compliance with relevant security standards and regulationsnConduct regular security assessments and audits to identify vulnerabilities and enhance defencesnProvide day-to-day leadership and support to three direct reports, helping to develop their skills and ensure consistent delivery. Enable the growth of individuals through effective performance managementnStay current with industry trends and emerging threats, adapting strategies accordinglynRepresent the company at industry events and conferences, promoting our commitment to cybersecurity excellencenInterface to SOC (external supplier) - ensure they are proactively taking action and, when we see new and emerging threats, recommendations are made to enhance our security posturenCritical Skills for Success
Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related fieldnExtensive experience in incident response, threat management, and cybersecurity within a large organizationnProven track record of leading and managing IT security teamsnStrong analytical and problem-solving skillsnExcellent communication and collaboration abilitiesnAbility to work in a dynamic and fast-paced environmentnWillingness to travel occasionally to company locations and industry eventsnInterested! Send your up-to-date CV to Claire Ingram at Crimson for reviewnNot interested! Do you know anyone that might be? Refer a friend for this role to earn 50 worth of vouchers
#J-18808-Ljbffrn
Head of IT Security Incident and Threat Management - Solihull
Posted 1 day ago
Job Viewed
Job Description
Crimson and IMI have joined forces to build IMI's new security team, and we are looking for talented individuals to join us on this exciting journey.If you are passionate about IT security and want to be part of a dynamic team that is shaping the future of security within a successful global company, we want to hear from you!nWe are seeking a highly skilled and experienced Head of IT Security Incident and Threat Management to join our team.In this role, you will be responsible for leading the strategic efforts to safeguard the company's digital assets against potential threats and incidents.This role requires a seasoned professional with a deep understanding of cybersecurity, incident response an threat management within a FTSE 100 environment.nThe salary on offer for this position is between £90,000 and £10,000 per annum plus benefits.nPlease note this role is based on site for the first 3 months followed by a hybrid working arrangement.nKey Responsibilities
Develop and implement comprehensive incident response strategies to address security threats swiftly and effectivelynLead the threat and intelligence program, ensuring timely detection and mitigation of cyber risks.nEnsure compliance with relevant security standards and regulations.nConduct regular security assessments and audits to identify vulnerabilities and enhance defences.nProvide day-to-day leadership and support to three direct reports, helping to develop their skills and ensure consistent delivery.Enable the growth of individuals through effective performance management.nStay current with industry trends and emerging threats, adapting strategies accordingly.nRepresent the company at industry events and conferences, promoting our commitment to cybersecurity excellence.nInterface to SOC (external supplier) - make sure they are proactively taking action and when we see new and emerging threats recommendations are made to enhance our security posture.nCritical Skills for Success
Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field.nExtensive experience in incident response, threat management, and cybersecurity within a large organization.nProven track record of leading and managing IT security teams.nStrong analytical and problem-solving skills.nExcellent communication and collaboration abilities.nAbility to work in a dynamic and fast-paced environment.nWillingness to travel occasionally to company locations and industry events.nInterested! Send your up-to-date CV to Claire Ingram at Crimson for reviewnNot interested! Do you know anyone that might be? Refer a friend for this role to earn 50 worth of vouchers.
#J-18808-Ljbffrn
Information Security Analyst - SIEM & Incident Response
Posted 17 days ago
Job Viewed
Job Description
Responsibilities:
- Monitor security alerts and events generated by the SIEM system in real-time.
- Analyze security incidents, identify root causes, and perform detailed investigations.
- Develop and implement effective incident response procedures and playbooks.
- Conduct forensic analysis of security breaches and compromised systems.
- Configure and tune SIEM rules, correlation logic, and dashboards to enhance threat detection capabilities.
- Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and attack vectors.
- Collaborate with IT teams to implement security controls and remediate vulnerabilities.
- Participate in security awareness training initiatives.
- Maintain accurate documentation of security incidents, investigations, and resolutions.
- Contribute to the continuous improvement of the SOC's operational processes and tools.
- Assist in vulnerability assessments and management activities.
- Provide support for security audits and compliance activities.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 3-5 years of experience in information security, with a focus on SIEM operations and incident response.
- Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, ArcSight).
- Strong understanding of common cyber threats, attack techniques, and mitigation strategies.
- Familiarity with network protocols, operating systems (Windows, Linux), and security technologies (firewalls, IDS/IPS, endpoint protection).
- Experience with forensic tools and techniques is a plus.
- Excellent analytical, problem-solving, and critical-thinking skills.
- Effective communication and interpersonal skills, with the ability to work collaboratively within a team.
- Relevant security certifications such as CompTIA Security+, CEH, GCIH are advantageous.
- Ability to work under pressure and respond effectively to security incidents.
- Must be eligible to work in the UK.
This is an exciting opportunity to join a critical function within a leading financial institution and make a tangible contribution to its security posture. If you are a proactive and skilled security professional, we encourage you to apply. The role is based in Bradford, West Yorkshire, UK .
Senior Cyber Security Analyst - Incident Response
Posted 1 day ago
Job Viewed
Job Description
At Aberdeen, our ambition is to be the UK’s leading Wealth & Investments group. Strengthening talent and culture is a strategic priority to attract and retain the industry’s best talent. Our people put stakeholders at the heart of everything we do, helping to make a positive difference to the lives of our clients, customers, colleagues, shareholders and society. We are focused on growing our direct and advised wealth platforms and repositioning our specialist asset management business to meet client demand, supported by leading technology and talent.nAberdeen comprises three businesses, interactive investor (ii), Investments, and Adviser, each focused on meeting and adapting to our clients’ evolving needs.ninteractive investor, the UK’s second largest direct-to-consumer investment platform, enables individuals in the UK to plan, save, and invest in the way that works for them.nOur Adviser business provides financial planning solutions and technology for UK financial advisers, enabling them to create value for their customers.nOur Investments business is a specialist asset manager that focuses on areas where we have both strength and scale to capitalise on key market themes, through either public markets or alternative asset classes.nAbout the role
The Senior Cyber Security Analyst role is an integral part of the Cyber Security Operations team. This role is technical and will support the Cyber Response Lead in responding to escalated security alerts from L1 and L2 analysts, and in proactively developing and tuning detection rules. The role reports to the Cyber Response Lead and is based in Edinburgh. The role holder will work closely with the Cyber Security Operations Centre, other security functions, specialist 3rd party security suppliers, and the global IT and business teams.nKey Responsibilities
Conduct thorough investigations to determine root cause, scope and impact of security alerts escalated from L1 and L2 security analysts.nMonitor detection and response KPIs.nSupport detection rule management, implementing new rules and tuning out false positives.nMaintain incident response plans and playbooks.nSupport in documenting incidents and response actions in detailed post-incident reporting.nManage the Information Security Queue in relation to Cyber Response tickets.nCoordinate and collaborate with internal and external stakeholders, such as IT, business and audit teams on security-related matters.nRecommend and implement security posture improvements, collaborating with IT teams to ensure security measures are integrated into systems.nAbout the Candidate
Experience in Cyber Security , ideally within an international asset management or similar large organisations.nPassion for security and self-development
to keep up to date with the evolving threat and vulnerability landscape, new technologies and service improvements.nAble to work in an international matrix organisation
with complex and dynamic drivers and constraints.nComfortable with a fast-paced multi-threaded working environment .nProficiency in Microsoft Security Stack
– Strong hands-on experience with Microsoft’s security ecosystem, including the Defender suite and related identity protection technologies.nProficiency with Microsoft Sentinel
(SIEM/SOAR) for security monitoring, detection and incident response, including configuring, tuning, maintaining, analysing alerts and incidents, developing hunting queries (KQL), automation playbooks, and integration with other security controls.nExperience with security tools outside the Microsoft ecosystem , such as IDS/IPS, vulnerability scanners, web and email filtering, web application firewalls, DDoS protections, proxies, host-based protections and malware analysis engines.nGood understanding of Cyber Detection and Response Concepts
such as MITRE ATT&CK framework for mapping adversary behaviours and improving detection coverage.nInclusion and Benefits
We are proud to be a Disability Confident Committed employer. If you have a disability and would like to apply to UK roles under the Disability Confident Scheme, notify us in the candidate questionnaire so we can support your application process.nOur benefitsnWe offer an environment where you can learn, get involved and be supported. Rewards include 40 days’ annual leave, 16% employer pension contribution, a discretionary performance-based bonus (where applicable), private healthcare and flexible benefits such as gym discounts and season ticket loans. More about our benefits is available in the candidate materials.nOur businessnOur business is structured around three areas focusing on client needs. You can find out more about what we do in our candidate materials.nAn inclusive way of working
Aberdeen supports a blended working approach, combining office collaboration with the flexibility of working from home. We value an inclusive culture where diverse perspectives drive our actions. If you need assistance with your application or an adjustment to interview arrangements due to a disability, please let us know and we will help. We are committed to an inclusive workplace where all forms of difference are valued and where meritocracy, fairness and transparency guide our actions.
#J-18808-Ljbffrn
Senior Cyber Security Analyst - Incident Response
Posted 1 day ago
Job Viewed
Job Description
At Aberdeen, our ambition is to be the UK's leading Wealth & Investments group. Strengthening talent and culture is one of our strategic priorities. We strive to make Aberdeen a great place to work so that we can attract and retain the industry's best talent. Our people put our stakeholders at the heart of everything they do by helping us to make a positive difference to the lives of our clients, customers, colleagues, shareholders, and society. We are focused on growing our direct and advised wealth platforms and repositioning our specialist asset management business to meet client demand. We are committed to providing excellent client service, supported by leading technology and talent.
Aberdeen comprises three businesses, interactive investor (ii), Investments, and Adviser, each of which focuses on meeting and adapting to our clients' evolving needs:
interactive investor, the UK's second largest direct-to-consumer investment platform, enables individuals in the UK to plan, save, and invest in the way that works for them.
Our Adviser business provides financial planning solutions and technology for UK financial advisers, enabling them to create value for their customers.
Our Investments business is a specialist asset manager that focuses on areas where we have both strength and scale to capitalise on the key themes shaping the market, through either public markets or alternative asset classes.
About the rolenThe Senior Cyber Security Analyst role is an exciting and integral part of the Cyber Security Operations team. This role is technical and will support the Cyber Response Lead in responding to escalated security alerts from L1 and L2 analysts, and proactively developing and tuning detection rules. The role reports directly to the Cyber Response Lead and is based in Edinburgh. The role holder will work closely with our Cyber Security Operation Centre and with other security functions as well as specialist 3rd party security suppliers and the global IT and business teams.
Key Responsibilities
Conduct thorough investigations to determine the root cause, scope, and impact of security alerts escalated from L1 and L2 security analysts.
Monitor detection and response KPIs
Support detection rule management, implementing new rules and tuning out false positives
Maintain incident response plans and playbooks
Support in documenting incidents and response actions in detailed post incident reporting
Manage the Information Security Queue in relation to Cyber Response tickets
Coordinate and collaborate with internal and external stakeholders, such as IT, business, and audit teams on security-related matters.
Recommend and implement security posture improvements, collaborating with IT teams to ensure security measures are integrated into systems
About the Candidate
Experience in Cyber Security , ideally within an international asset management or similar large organisations.
Passion for security and self-development
to keep up to date with the evolving threat and vulnerability landscape, new technologies and service improvements
Able to work in an international matrix organisation
with complex and dynamic drivers and constraints
Comfortable with a fast paced
multi-threaded working environment
Proficiency in Microsoft Security Stack
- Strong hands-on experience with Microsoft's security ecosystem, including the Microsoft Defender suite (MDE, MDO, MDA, MDI) and related identity protection technologies (Azure AD Identity Protection, Conditional Access).
Proficiency with Microsoft Sentinel
(SIEM/SOAR) for security monitoring, detection, and incident response. The ideal candidate will have practical experience configuring, tuning, and maintaining these solutions, analysing alerts and incidents, developing advanced hunting queries (KQL), developing automation playbooks, and integrating with other security controls and solutions.
Experience with security tools outside of the Microsoft eco-system , such as IDS/IPS, vulnerability scanners, web and email filtering, webapp firewalls and DDoS protections, proxies, host-based protections and malware analysis engines
Good understanding of Cyber Detection and Response Concepts
such as the MITRE ATT&CK framework for mapping adversary behaviours and improving detection coverage
Disability and inclusionnWe are proud to be a Disability Confident Committed employer. If you have a disability and would like to apply to one of our UK roles under the Disability Confident Scheme, please notify us by completing the relevant section in our candidate questionnaire. One of our team will reach out to support you through your application process.
Our benefitsnThere's more to working life than coming home with a good salary. We have an environment where you can learn, get involved and be supported.
When you join us, your reward will be one of the best around. This includes 40 days' annual leave, a 16% employer pension contribution, a discretionary performance-based bonus (where applicable), private healthcare and a range of flexible benefits - including gym discounts, season ticket loans and access to an employee discount portal. You can read more about our benefits here.
Our businessnEnabling our clients to be better investors drives everything we do. Our business is structured around three distinct areas - our vectors of growth - focused on our clients' changing needs. You can find out more about what we do here.
An inclusive way of workingnWhatever way you like to work, if you have the talent and commitment to join our team, we'd like to hear from you.
At Aberdeen we've adopted a 'blended working' approach. This approach combines the benefits of face-to-face collaboration, coaching and connecting in our offices with the flexibility of working from home. It enables colleagues to find a balance that works for their roles, their teams, our clients and our business.
An inclusive culture, where diverse perspectives drive our actions, is at the core of who we are and what we do. If you need assistance with your application, or a reasonable adjustment to your interview arrangements - for example, because you are neurodivergent, or have a physical, sensory, cognitive, mental, visible or invisible disability - please let us know and we'll be happy to help.
We're committed to providing an inclusive workplace where all forms of difference are valued and which is free from any form of unfair or unlawful treatment. We define diversity in its broadest sense - this includes but is not limited to our diversity of educational and professional backgrounds, experience, cognitive and neurodiversity, age, gender, gender identity, sexual orientation, disability, religion or belief and ethnicity and geographical provenance. We support a culture that values meritocracy, fairness and transparency and welcomes enquiries from everyone.
If you need assistance or an adjustment due to a disability please let us know as part of your application and we will assist.
#J-18808-Ljbffrn
Senior Information Security Analyst (SIEM & Incident Response)
Posted 5 days ago
Job Viewed
Job Description
Responsibilities:
- Manage, configure, and optimize the SIEM platform to effectively detect, analyze, and report on security threats and incidents.
- Develop and tune correlation rules, alerts, and dashboards to identify malicious activity and anomalies.
- Lead and coordinate incident response activities, including investigation, containment, eradication, and recovery.
- Perform forensic analysis of security incidents to determine root cause and impact.
- Conduct vulnerability assessments and penetration testing, and work with relevant teams to remediate findings.
- Develop and maintain incident response plans, playbooks, and standard operating procedures.
- Monitor security logs and threat intelligence feeds to stay ahead of emerging threats.
- Provide technical expertise and guidance on security best practices to IT and business units.
- Collaborate with internal teams and external stakeholders during security investigations.
- Stay current with the latest cybersecurity threats, vulnerabilities, and defense techniques.
- Contribute to the continuous improvement of the organization's overall security posture.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Minimum of 5 years of experience in information security, with a strong focus on SIEM management and incident response.
- Hands-on experience with leading SIEM solutions (e.g., Splunk, QRadar, LogRhythm, Microsoft Sentinel).
- Proficiency in log analysis, threat hunting, and security event correlation.
- Strong understanding of network security, endpoint security, and cloud security principles.
- Experience with forensic tools and techniques for incident investigation.
- Knowledge of common attack vectors, malware, and intrusion techniques.
- Relevant security certifications such as CISSP, GCIA, GCIH, CEH, or equivalent are highly desirable.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong communication and interpersonal skills, with the ability to work effectively under pressure.
Security Analyst
Posted 14 days ago
Job Viewed
Job Description
Security Analyst | UK Financial Services | Compliance & Technical Security | North West England | 35k-45k + Benefits/Progression
Zachary Daniels are delighted to be working with a well-established UK business during an exciting period of growth, to recruit a Security Analyst . This is a company investing heavily in technology, compliance, and security.
In this role, you'll be part of a collaborative team, working across compliance, risk, and technical security to protect the business, strengthen frameworks, and support transformation projects. It's a varied position offering real scope to grow both your governance and technical skills.
Benefits You'll Enjoy:
Competitive salary up to 45 000 (DOE)
Generous annual leave entitlement, rising with service
Enhanced maternity, paternity, and parental leave
Life assurance
Regular social events
Role Responsibilities:
Identify and assess security risks, ensuring mitigation plans are in place.
Support the development and maintenance of security policies and standards.
Assist with third-party security reviews and supplier risk management.
Provide oversight of vulnerability assessments.
Conduct architecture reviews for new systems and services.
Evaluate technical controls and recommend improvements.
Support the rollout of new security tools and technologies.
Provide input into incident management and security metrics reporting.
About You:
2+ years' experience in an security role.
Strong understanding of risk assessment methodologies.
Knowledge of frameworks such as ISO 27001.
Experience with vulnerability management and technical controls.
Excellent problem-solving skills with strong attention to detail.
Confident communicator with the ability to explain security concepts to non-technical stakeholders.
This is more than just a security role, it's a chance to join a forward-thinking business, develop your expertise across both compliance and technical domains, and make a real impact in protecting and enabling the organisation.
Apply today with your most up-to-date CV!
BBBH34361
Be The First To Know
About the latest Security incidents Jobs in United Kingdom !
Security Analyst
Posted 10 days ago
Job Viewed
Job Description
Security Analyst | UK Financial Services | Compliance & Technical Security | North West England | 35k-45k + Benefits/Progression
Zachary Daniels are delighted to be working with a well-established UK business during an exciting period of growth, to recruit a Security Analyst . This is a company investing heavily in technology, compliance, and security.
In this role, you'll be part of a collaborative team, working across compliance, risk, and technical security to protect the business, strengthen frameworks, and support transformation projects. It's a varied position offering real scope to grow both your governance and technical skills.
Benefits You'll Enjoy:
Competitive salary up to 45 000 (DOE)
Generous annual leave entitlement, rising with service
Enhanced maternity, paternity, and parental leave
Life assurance
Regular social events
Role Responsibilities:
Identify and assess security risks, ensuring mitigation plans are in place.
Support the development and maintenance of security policies and standards.
Assist with third-party security reviews and supplier risk management.
Provide oversight of vulnerability assessments.
Conduct architecture reviews for new systems and services.
Evaluate technical controls and recommend improvements.
Support the rollout of new security tools and technologies.
Provide input into incident management and security metrics reporting.
About You:
2+ years' experience in an security role.
Strong understanding of risk assessment methodologies.
Knowledge of frameworks such as ISO 27001.
Experience with vulnerability management and technical controls.
Excellent problem-solving skills with strong attention to detail.
Confident communicator with the ability to explain security concepts to non-technical stakeholders.
This is more than just a security role, it's a chance to join a forward-thinking business, develop your expertise across both compliance and technical domains, and make a real impact in protecting and enabling the organisation.
Apply today with your most up-to-date CV!
BBBH34361
Security Analyst
Posted 11 days ago
Job Viewed
Job Description
Security Analyst | UK Financial Services | Compliance & Technical Security | North West England | £35k-£45k + Benefits/Progression
Zachary Daniels are delighted to be working with a well-established UK business during an exciting period of growth, to recruit a Security Analyst . This is a company investing heavily in technology, compliance, and security.
In this role, you'll be part of a collaborativ.
WHJS1_UKTJ
Principal Cyber Security Incident Response Analyst
Posted 14 days ago
Job Viewed
Job Description
Principal Cyber Security Incident Response Analyst
60,000 - 70,000
Full Time / Permanent
West Midlands / Hybrid (1-2 days a month in the office ideally)
The Role
I am looking for a driven and experienced Principal Cyber Security Incident Response Analyst to join a large nationally recognised brand head quartered in the West Midlands.
As a Principal Cyber Security Incident Response Analyst, you will play a pivotal role in protecting critical systems, assets, and people from cyber security threats. You'll be part of a world-class team, working at the forefront of threat detection and response.
We are ideally looking for someone Midlands based who can be on site in Warwickshire 1-2 days a month on average.
Responsibilities:
- Provide leadership and mentorship to Analysts and Senior Analysts, fostering a culture of excellence and continuous development.
- Drive the evolution and enhancement of the Cyber Security Incident Response function, ensuring the team consistently meets and exceeds key performance indicators.
- Lead investigations and remediation efforts for cyber security incidents and alerts across diverse sources, including network, endpoint, cloud environments, and threat intelligence feeds.
- Perform in-depth trend analysis to identify patterns and inform improvements in organisational controls and threat detection capabilities.
- Develop, maintain, and continuously improve documentation and reporting frameworks to support transparency, consistency, and strategic decision-making.
Experience required:
- Previous experience in a similar Cyber Incident Response Analyst role, preferably in a senior or lead capacity.
- Strong experience in security monitoring across diverse systems and environments, including cloud and on-premises.
- Proven leadership in incident response within SOC settings.
- Deep understanding of the cyber threat landscape, attack vectors, and detection techniques.
- Proficient in cybersecurity tools, regulations, and compliance standards.
- Excellent communication and stakeholder engagement skills, with the ability to convey technical insights to varied audiences.
Please apply via the link or contact (url removed) for more information
Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law.
Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers.
By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.