Trabajos incident response en BasingstokeCrear alertas

About Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. At Visa, you'll have the opportunity to create impact at scale - tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. Join Visa and do work that matters - to you, to your community, and to the world. Progress starts with you. Job Description Reporting directly to the Senior Vice President of Global Operations, the Vice President of Payment Products Authorization Operations will play a critical role in 24/7 operations for key areas of our Payment Products division. Overseeing a global team of 100+ operations professionals that support realtime consumer payment applications and services, this role involves coordination across multiple global data centers and processing environments. This role requires deep, handson leadership experience operating largescale, realtime, highavailability platforms. The successful candidate will have directly owned production outcomes, major incident response, and operational risk in mature, highly regulated environments, where reliability, speed of decisionmaking, and judgment under pressure are critical. Global Operations holds the responsibility of ensuring Visa's diverse portfolio of commercial services perform optimally, meeting stringent availability targets while exceeding client and ecosystem expectations. As Visa's authorization platforms increase in complexity and scale, Global Operations is evolving its operating model by architecting automation, Generative AI, and AIOps into its operational foundation. As part of this evolution, the organization is moving toward fully orchestrated, automated ways of working, where detection, triage, decisionsupport, and response are increasingly driven by integrated automation and intelligent systems rather than manual, siloed intervention. Global Operations serves as the engine room of production operations-balancing extreme reliability with innovation, and ensuring Visa can operate confidently at five and sixnines availability. Working with highly integrated, highthroughput, realtime transaction processing systems, equal importance is placed on robust observability, intelligent event detection, and disciplined incident management. Global Operations defines and enforces operational standards that support today's business demands while adapting how work is done to meet the needs of tomorrow. Through blameless postmortems, intellectual curiosity, and continuous problemsolving, the organization is actively transforming reactive operations into proactive and predictive capabilities, while creating an environment where team members can learn, grow, and evolve their roles over time. In addition to the functional role, the Vice President of Payment Products Authorization Operations will fulfill the role of site lead for our Basingstoke UK campus. Basingstoke is a key strategic location for the Technology organization, home to more than 200 employees across the company, and features one of Visa's global data centers. As site lead, this role supports campuswide engagement, facilities coordination, and employee advocacy to ensure a strong and inclusive workplace experience. Responsibilities • Lead a globally distributed team of approximately 100 authorization operations professionals, ensuring delivery of reliable, highquality, 24/7 operational support, • Own authorization operations for Visa's Payment Products, providing standardized, secure, and highly available platform services with availability targets of up to six nines, • Provide continuous operational support in close partnership with Product Reliability Engineering and Infrastructure Reliability Engineering teams, • Lead the Operational Acceptance of products and services onboarding into production, ensuring readiness, risk mitigation, and clear operational ownership, • Develop strategic direction, workforce plans, and organizational design aligned with the evolution of authorization operations toward automation and AIenabled models, • Act as a senior leader within Visa's Global Operations organization, representing authorization operations in executivelevel discussions and major incident scenarios, • Bring demonstrated operational judgment from leading highurgency, highimpact production environments, where outages or degradation have material business, client, or ecosystem impact, • Serve as the senior operational decisionmaker during major authorization incidents, balancing speed, risk containment, and longterm system integrity, • Lead the design and adoption of fully orchestrated operational workflows, integrating observability, automation, AIOps, and incident management into cohesive, endtoend operating patterns, • Reduce reliance on manual handoffs and adhoc intervention by driving standardized, automated, and repeatable operational responses, • Apply prior production operations experience to determine where automation, AIOps, and agentic capabilities should-and should not-replace human decisionmaking, with appropriate controls and escalation paths, • Regularly produce and review key performance metrics with management, product teams, and client services partners, • Establish dashboards and analytics for service health, operational effectiveness, and team performance, • Lead customer success efforts through close partnership with Client Services and targeted client engagement, • Define and execute the operational innovation strategy, embedding automation, Generative AI, AIOps, and emerging agentic capabilities into daytoday operations while maintaining clear governance and humanintheloop controls Qualifications Basic Qualifications • 12+ years of professional experience with a Bachelor's degree, or 10+ years with an advanced degree (e.g., Master's, MBA), or 8+ years with a PhD Relevant Operational Experience • Prior leadership experience running missioncritical, realtime platforms at global scale (e.g., payments, financial networks, transaction processing platforms, telecom, or similarly regulated environments), • Direct accountability for 24x7 production operations, including incident leadership, escalation management, and postincident learning, • 15+ years of experience leading global teams and managing complex, crossfunctional initiatives, • Industry leadership experience in largescale operational support for highly available systems, • Experience operating and supporting mainframebased payment processing platforms, • Experience with microservices architectures and containerbased platforms, including messaging, queuing, and caching technologies, • Working knowledge of Generative AI, AIOps, and automation concepts, and experience applying them to improve operational outcomes and resilience, • Experience designing or leading highly automated, orchestrated operations models, reducing manual effort while maintaining or improving reliability, • Experience with IT Service Management (ITSM), including incident management, change management, operational metrics, and continuous improvement, • Demonstrated ability to lead transformation in mature organizations, including guiding teams through role evolution and resistance to change, • Proven ability to recruit, develop, retain, and motivate highcaliber technical talent, • Strong problemsolving skills, with the ability to navigate complex, openended challenges and drive them to resolution, • Ability to prioritize and execute in fastpaced, highstakes environments with minimal direction, • Strong leadership and peoplemanagement capabilities, including experience leading geographically distributed, multifunctional teams, • Payments industry experience strongly preferred Domain knowledge and expertise in commerce and payment systems and platforms Experience with compliance requirements including PCI, SOX, SSAE/ISAE requirements Experience with regulatory standards including FBA, BOE, RBI This is an on-site position. An on-site position must be consistently performed at an assigned Visa office location and require daily commute to the office location. Visa is an EEO Employer Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Security Engineer Location: Dummer, Basingstoke Salary: £40,000 - £45,000 We’re looking for a Security Engineer to come on board to join our team to lead the technical security function within Group IT Services, ensuring robust protection of systems, data and users. You will be managing the security ticket workload within the Security team and responding to and managing security incidents and alerts. In addition you will provide consultation and expertise on security matters. Responsibilities: Security Operations & Incident Management: • Managing ticket workload within the Security team., • Gathering, analysing and acting upon threat intelligence., • Responding to on-going security incidents., • Responding to active alerts from security systems., • Writing change management requests for security-related changes. Vulnerability & Endpoint Management: • Conducting penetration testing and tracking corrective actions., • Resolving vulnerabilities in the infrastructure and EUC estate., • Defining and managing the configuration of endpoint protection policies., • Managing the configuration of Identity and Access Management services. Accreditation & Compliance: • Writing and ratifying policies and ensuring compliance with the Information Security Management System (ISO27001)., • Ensuring compliance with CyberEssentials and CyberEssentials+ requirements and carrying out audits., • Ensuring compliance with accreditation policies through auditing with external 3rd party auditors., • Being consulted on project plans and designs in principle., • Providing security expertise on Change Request Approvals (CAB)., • Being consulted on software deployment from a security perspective., • Being consulted on endpoint protection matters for infrastructure and EUC., • Being consulted on identity and access administration matters Skills Required: • Strong technical knowledge of security tools, frameworks and best practices., • Experience with penetration testing and vulnerability management processes., • Understanding of endpoint protection technologies and policies., • Knowledge of identity and access management principles., • Familiarity with security accreditations such as ISO27001, CyberEssentials and CyberEssentials+., • Excellent incident response and threat intelligence skills., • Strong communication skills to convey security matters to technical and non-technical audiences. Benefits: • 25 Days Holiday, • Birthday Day Off, • Buy Holiday Scheme, • Career Development and Progression Opportunities, • Employee Assistance Programme, • Enhanced Company Sick Pay, • Discounted Retail Vouchers, • Reduced Gym Membership, • SCG Mobile Benefit, • Employee Referral Bonus, • Annual Salary Reviews, • Pension Scheme, • Onsite Canteen (offering free croissants and free freshly made soup daily), • Free On-Site Parking, • Charity Events SCG is proud to be an equal opportunities employer. We welcome applications from all parts of the community and are committed to upholding the principles of the Equality Act 2010. We are committed to supporting applicants with disabilities. We will endeavour to make necessary adjustments to ensure a fair and accessible recruitment process.

Senior Security Engineering Consultant (121lw) Remote - £90,000- £100,000pa + Benefits\n\nAre you an experienced cyber professional from a military or defence background looking to step into a more consultative, project-led role?\n\nWe’re supporting a rapidly growing cyber security organisation that is actively investing in ex-military talent and building a high-performing Security Operations capability. This role is ideal for someone who has already transitioned (or is close to transitioning) and wants to move into a client-facing, engineering-focused consultancy position.\n\nDUE TO THE NATURE OF THIS RECRUITMENT CONSULTANCY, WE ARE ONLY ABLE TO REPRESENT INDIVIDUALS WHO ARE EX MILITARY.\n\nThis is not a traditional SOC role. You’ll work across a range of customer environments, helping design, build, and improve Security Operations capabilities - from SIEM and SOAR implementations through to automation, detection engineering, and cloud security assessments.\n\nRoughly, 50% project delivery (client-facing consultancy) 50% internal engineering, innovation, and capability development. A remote role with occasional travel to South East office.\n\nYou do not need experience with every commercial tool - training is provided. This role suits either ex-military candidates who have already gained some commercial or advanced technical exposure, OR service leavers with strong cyber/SOC experience and the confidence to step into a consultative role\n\nWhat You’ll Be Doing\n\nDelivering security engineering projects across SIEM, SOAR, and XDR platforms\n\nDesigning and building automation playbooks and integrations\n\nConducting cloud (Azure-focused) security health checks\n\nDeveloping detection rules, log parsing, and correlation logic\n\nSupporting vulnerability and exposure management programmes\n\nWorking closely with internal engineering teams to improve tooling and processes\n\nActing as a trusted technical advisor to customers\n\nEssential\n\nExperience working in a SOC or CDOC (Cyber Defence Operations Centre) environment\n\nStrong understanding of - Security monitoring & incident response and Threat behaviours (e.g. MITRE ATT&CK)\n\nHands-on experience with at least one - SIEM / SOAR / XDR platform\n\nAbility to take a problem and engineer a solution end-to-end\n\nStrong communication skills and ability to engage with stakeholders\n\nIdeal (but not essential)\n\nExperience with cloud security (Azure preferred)\n\nExposure to automation or scripting (e.g. Python, APIs)\n\nExperience in advisory, design, or project-based work\n\nFor military candidates:\n\nExperience at commissioned / supervisory level OR\n\nExposure to advisory or capability development work\n\nYou’ll likely align well if you have, worked in a SOC, CDOC or cyber operations environment\n\nExperience analysing threats, logs, or incidents\n\nExposure to secure networks or defence systems\n\nA mindset focused on problem-solving, adaptability, and ownership\n\nThis is a fast-paced, collaborative, “people first” culture, where people genuinely support each other Clear progression pathways, funded certifications and structured training plans.\n\nInterested? Please send a copy of your CV with a note outlining why this would be the ideal opportunity for you to Liz Walsh at Ex-Mil Recruitment Ltd

SOC Engineer (Security Operations / Cyber Defence) (122lw) - Remote - £65,000- £70,000 pa + Benefits Are you leaving the military or transitioned, with experience in SOC or Cyber Defence Operations? We’re working with a growing cyber security organisation that is actively hiring individuals from military and defence backgrounds, particularly those with experience in CDOC or security operations environments. DUE TO THE NATURE OF THIS RECRUITMENT CONSULTANCY, WE ARE ONLY ABLE TO REPRESENT INDIVIDUALS WHO ARE EX MILITARY. You’ll join a fast-paced Security Operations team, supporting and improving customer environments while developing your skills into more advanced areas like engineering, automation, and detection development. This is a great opportunity to move from, pure operations into engineering and technical specialisation. A remote role with option of hybrid working or occasional visits to South East Office. Commercial tools are not a barrier - mindset and foundation matter more. What You’ll Be Doing Monitoring and supporting security and network environments Investigating and resolving security incidents and alerts Working with SIEM / XDR tools to analyse logs and identify threats Supporting configuration changes, upgrades, and improvements Contributing to detection and response capabilities Gradually getting involved in projects and engineering work Essential Experience in a SOC or CDOC environment Understanding of - Security monitoring Incident response Logs and telemetry Awareness of - Common attack techniques (e.g. phishing, malware execution) Network fundamentals (DNS, HTTP, etc.) Strong problem-solving mindset Comfortable working in a team-based, fast-paced environment Desirable Exposure to SIEM, XDR, or EDR platforms Knowledge of MITRE ATT&CK Experience with Windows/Linux systems Any scripting or automation exposure Military Applicants - This role is particularly well suited to - Royal Signals / CIS / Network Engineers Cyber Operators / SOC Analysts Individuals with experience in Corsham / CDOC environments You’ll succeed if you - Are curious and ask “why?”. Take ownership of problems. Enjoy investigating and fixing issues. Want to continue learning and developing What You’ll Get - Structured training and funded certifications. Clear progression. A supportive, people-first culture. Opportunity to work alongside experienced engineers, including ex-military professionals If you’re looking to build a long-term career in cyber security and want an organisation that understands and values military experience, this is a fantastic opportunity. Interested? Please send a copy of your CV with a note outlining why this would be the ideal opportunity for you to Liz Walsh at Ex-Mil Recruitment Ltd

Senior Cyber Incident Response Leader (Advisory & Consulting). Cyber Incident Response leader. Cyber Incident Response engagements.

Launch Your Cyber Security Career – Job Guaranteed! Cyber attacks are rising, and companies need skilled professionals now more than ever.With Newto Training’s Cyber Security Career Programme, you’ll gain 4 top certifications (Azure Fundamentals, CompTIA Security, CompTIA CySA, Forescout FSCA)

The role involves project planning, incident response management, and collaboration across teams to uphold security integrity.

Launch Your Cyber Security Career – Job Guaranteed! Cyber attacks are rising, and companies need skilled professionals now more than ever.With Newto Training’s Cyber Security Career Programme, you’ll gain 4 top certifications (Azure Fundamentals, CompTIA Security, CompTIA CySA, Forescout FSCA)

This hands-on role involves overseeing incident response across cloud and hybrid environments while mentoring a distributed team. Candidates must have substantial management experience in security operations, strong technical skills in SIEM and EDR platforms, and the ability to handle high-severity

The role involves performing forensics, assisting with incident response engagements, and producing high-quality reports. Candidates should have experience in incident response or information security and a relevant degree in fields such as Computer Science or Cybersecurity.

The role demands expertise in threat detection, incident response, and collaboration with internal and external teams. Key responsibilities include monitoring security incidents, triaging alerts, and maintaining security hygiene.

A leading UK tech company is looking for a Senior SOC Analyst to lead major security incident responses and enhance the overall SOC capability. The role involves incident response, threat hunting, malware analysis, and producing high-quality reports.

OCS in the United Kingdom is seeking a Security Officer to ensure the safety and security of clients and their premises.The role involves conducting regular patrols, monitoring access points, and responding to emergencies.Ideal candidates will have strong observational and communication skills, and

We will prioritise candidates with demonstrable digital forensics and incident response ('DFIR') experience, especially those that have worked in an incident handling capacity before. Project management: from that first call to the incident's conclusion, you will be responsible for ensuring the resp

This role involves leading responses to high-severity incidents, coordinating technical teams, and maintaining clear communication with stakeholders. Candidates should have 6-10+ years of experience in incident management, strong ITIL process knowledge, and effective communication skills. A leading

The ideal candidate will have substantial experience in incident response, cloud security, and hands-on security tooling implementation.

As a Response Associate (Technical Lead), you will deploy your incident response expertise in a senior delivery role across our incident response services. Candidates with the following qualifications and experience are likely to succeed as Incident Response Associates at S‑RM. The cyber sector is

CYFOR is seeking an Incident Response - Recovery Specialist to join their team. The role involves assisting clients with recovery from cyber incidents and restoring critical services in both cloud and on-premise environments.

Responsibilities include incident management, team mentorship, and operational improvements.

Deliver proactive services like incident response advisory, maturity improvements, cyber war-gaming, and response automation. Proven incident response experience supervising teams, managing incidents in-house or consulting; strong network forensics and security intelligence skills. Join a dynamic Cy

A leading cloud services provider is seeking an AWS Incident Response Team Analyst in Greater London. This role involves overseeing physical security operations, responding to incidents, and reporting.

Intermedia Intelligent Communications is looking for a Site Reliability Engineer to enhance reliability and operational readiness in a fast-paced cloud technology environment.The role requires expertise in Prometheus and/or VictoriaMetrics, as well as Linux and Windows troubleshooting skills.Respons

The role involves managing daily incident responses, ensuring effective communication, and developing team performance. A top security service provider is seeking an Incident Manager in King's Cross, London, to lead security operations for a major tech client.

This is a true ownership role in incident response, you’ll sit at the centre of how the organisation detects, responds to, and learns from security events. Rather than just reacting to incidents, you’ll shape how they are handled, improving maturity over time and ensuring lessons learned transla

A leading online fashion platform is seeking a seasoned cybersecurity professional to join their Detection, Analysis, and Response Team (DART).

The consultant will be responsible for collaborating with organisation stakeholders in developing, updating, and enhancing a comprehensive set of tactical and operational cyber incident response documents, including the Incident Response Plan, Communication Plan, Incident Response Playbooks, and Con

Candidates should have 3–5 years of experience in digital forensics and incident response, effective communication skills, and the ability to work under pressure. A global cyber resilience firm in the United Kingdom is seeking a Manager in Digital Forensics & Incident Response. The role requires l

The role involves managing escalated security incidents, conducting in-depth investigations, and optimizing security tooling.

The team purpose is to minimise and control the damage resulting from cybersecurity incidents, ensuring that the appropriate incident management and response controls are in place and operating as required to enable the identification, protection, detection, response, and recovery of RLG information

An innovative crisis management firm in the United Kingdom is seeking a skilled candidate to lead the development of crisis response frameworks and incident management rubrics for AI training.

Staff Security Engineer for Incident Response in London. Candidates should have 12+ years of security experience, especially in incident response and cloud security, and demonstrate advanced skills in digital forensics and crisis management. The role involves strategic decision-making to enhance sec

Responsibilities include monitoring security alerts, conducting incident response, and performing malware analysis. The ideal candidate will have experience in incident handling and forensic analysis, alongside a degree in Computer Science or related field.

This role involves monitoring the network for suspicious activity, managing security incidents, and conducting detailed incident analysis.

Candidates should have 2-3 years of cybersecurity experience, especially in incident response, and strong communication skills. The role involves delivering Response Readiness offerings, strengthening customer relationships, and providing technical insights.

Royal London is seeking a Senior Cyber Incident Response Coordinator to lead the response to cybersecurity events. The ideal candidate will have experience in managing cybersecurity incidents, a solid understanding of common threats, and the ability to create structured reports.

An environmental services company located in Greater London is seeking a dedicated professional to investigate water pollution incidents and undertake field monitoring.

The role involves triaging security alerts, coordinating incident responses, and mentoring junior analysts.

Responsibilities include incident response, managing key performance indicators, and ensuring compliance with safety standards.

A leading cybersecurity training provider in Greater London is seeking a skilled SOC Manager to oversee a team of analysts responsible for 24/7 monitoring and incident response. The position also requires knowledge of major cloud platforms and cybersecurity incident response processes.

Responsibilities include threat modelling, incident response, and support for compliance programs.

The role involves providing second-level support for security incidents, analyzing event logs, and maintaining security infrastructure.

Candidates should have 5+ years of experience and expertise in cybersecurity, incident response, and log analysis.

The role includes investigating complex security incidents, responding to threats, and mentoring junior analysts.

Principle is seeking an experienced Incident Response Lead for a hybrid role in London/Staines. The role demands experience with major incidents and a strong background in cloud or enterprise tech. You will be responsible for managing critical incidents in a global SaaS environment, coordinating tec

Cloud Incident Response: AWS, Azure, GCP incident response knowledge. CrowdStrike is looking for a highly motivated, self-driven Incident Response Manager for the Professional Services Consulting team. Our Services team offers engagements including front-page incident response investigations for org

The successful candidate will monitor and respond to security alerts, manage incident investigations, and optimize security tooling to enhance detection and reduce false positives.

Candidates should be capable of incident investigation, team mentorship, and client collaboration. Insight is seeking a Principal Security Analyst to lead their multi-client SOC, taking ownership of complex security incidents and guiding a team of analysts.

In this role, you'll provide essential 24x7 monitoring and response to security incidents, conduct investigations, and engage in threat hunting.