Incident response jobs in CambridgeCrear alertas

Complete online training designed to take you from zero experience to your first Cyber Security role. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The program

Trainee Cyber Security Course Programme Job Guarantee Included. Complete online training designed to take you from zero experience to your first Cyber Security role. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response,

We are looking for an experienced Senior Machine Learning Engineer to lead the design and production integration of ML into an established live trading system and drive its next phase of development. Building on our early ML research and prototypes, you will design, build, deploy, and operate production ML components that integrate directly with a real-time execution engine – improving decision-making and execution quality with measurable financial impact. This is an excellent opportunity for someone who enjoys autonomy, technical responsibility, and building production-grade ML systems where reliability, latency, and real-world feedback loops matter. What You’ll Do • Lead the design and production integration of ML components into a live, Python-based trading system, • Take early ML research/prototypes and turn them into reliable production models and services, • Build robust training and evaluation pipelines with safeguards against leakage, non-stationarity, and drift, • Develop real-time inference components with clear fail-safes, fallbacks, and graceful degradation, • Create monitoring and observability for production ML (model performance, drift detection, alerts, rollback plans), • Work with high-frequency market data: missing data, late arrivals, outliers, regime shifts, and noisy signals, • Collaborate directly with the Head Trader to translate strategy goals into ML objectives and measurable outcomes, • Partner closely with software engineers on integration, deployment, performance, and operational reliability, • Troubleshoot and resolve production issues quickly during key market hours when needed Essential Skills • Strong Python developer (min. 5+ years professional Python experience), • Demonstrable experience taking ML models from prototype to production (deployment, monitoring, and ongoing operation), • Strong understanding of validation pitfalls (e.g., leakage), time-series/non-stationary dynamics, and model drift, • Experience building end-to-end ML workflows: data ingestion/cleaning, feature engineering, training pipelines, model serving/inference, • Ability to design for reliability: monitoring, alerting, safe deployment, rollback strategies, and incident response, • Comfortable owning and improving an evolving codebase: refactors, architecture improvements, reproducibility, and clean tests, • Strong engineering discipline: correctness, edge cases, careful time-handling, attention to detail, • Comfortable working independently, making architectural decisions, and maintaining high code quality, • UK-based and available for support during core market hours when needed Desirable Skills • Experience with real-time/low-latency systems (streaming data, telemetry, market data, etc.), • Familiarity with production ML monitoring/observability practices and tooling, • Experience with cloud deployment environments (VMs/containers, monitoring, CI/CD), • Background in financial markets, algorithmic trading, or market microstructure (helpful, not required), • Experience with distributed systems, message queues, or event-driven architectures What We Offer • Competitive salary – negotiable based on experience, • Mostly remote, with some in-office collaboration days for coordination and planning, • Yearly bonus based on company performance, • The chance to take significant ownership of production Machine Learning in a live system, • Long-term role with the opportunity to influence the Machine Learning roadmap and system design, • A lean environment with minimal bureaucracy and direct impact

Join OCI’s Edge Security team as a Principal Engineer to architect and deliver cloud-scale DDoS protection. You’ll lead design for high-performance detection and mitigation systems, drive automation and operational excellence, and set the technical direction for customer-facing DDoS capabilities across OCI’s global edge. This role requires deep expertise in Linux networking data path and kernel-level networking (such as XDP, eBPF, DPDK, iptables, nftables), in addition to strong systems and DevOps engineering experience. Basic qualifications • 7–10 years building production backend systems, including 3–5 years in high-scale and/or low-latency environments., • Deep expertise in Linux networking data path and kernel-level networking (e.g., XDP, eBPF, dpdk, iptables, nftables) for traffic processing, filtering, and observability., • Proficiency in one or more: Java/Python/C++/Rust/Go (strong preference for Java for control-plane/services)., • Deep systems design expertise: concurrency, memory management, performance tuning, API design, consistency models, and distributed systems fundamentals., • Proven DevOps leadership at scale: CI/CD, automated testing, canarying, rollout/rollback, configuration management., • Strong IaC experience (e.g., Terraform) and solid cloud infrastructure fundamentals., • Domain experience in DDoS or network security services and common attack/defense patterns., • Advanced networking knowledge: TCP/IP, IPv4/IPv6, BGP, routing policy; DNS fundamentals., • Demonstrated operational excellence and observability practices (metrics, tracing, alerting). Preferred qualifications • Expertise with anycast routing, global traffic steering, and multi-region service readiness., • Experience with SDN, programmable data planes, or hardware mitigation platforms., • Building high-rate telemetry/streaming pipelines for near-real-time detection (packet/flow analytics)., • Background in resilience engineering, chaos testing, disaster recovery, and capacity planning at hyperscale., • Containerization/orchestration (e.g., Kubernetes) and secure service-to-service communication (mTLS, policy enforcement)., • Familiarity with zero trust, segmentation, and modern security architectures; exposure to compliance frameworks and audit preparation. How you’ll have impact • Deliver core DDoS detection/mitigation that protects OCI’s Tier 0 availability and customer trust., • Launch customer-facing DDoS offerings with self-service policy, visibility, and strong defaults., • Raise engineering quality, automation, and compliance maturity across the stack; mentor and grow the team’s technical bar. Ways of working • Security and privacy by design with auditable controls and policy adherence from day one., • Data-driven delivery with clear KPIs, SLOs, and stage gates from prototype to GA., • Collaborative, inclusive culture emphasizing design docs, code reviews, and knowledge sharing. What you’ll do • Lead architecture and delivery of low-latency backend services for DDoS detection, classification, and mitigation., • Define and evolve scalable data/control planes (policy, signaling, telemetry, orchestration) with strong fault isolation, resiliency, and compliance-by-design., • Own traffic engineering strategy (anycast, BGP policy, routing integration) and partner with networking, DNS, and edge platform teams., • Set operational standards: SLOs/SLAs, on-call health, incident response (including incident commander duties), runbooks, and post-incident learning., • Drive automation at scale: CI/CD strategy, test frameworks, progressive delivery (canary/blue-green), and infrastructure-as-code., • Establish robust observability (metrics, logs, traces) and capacity/scale models for high-throughput, highly available services., • Lead threat modeling, architecture reviews, and audit readiness for Tier 0 services; ensure security and privacy are embedded through the lifecycle., • Mentor engineers, influence cross-org roadmaps, and collaborate with Product, SRE, and Network Engineering from concept to GA.

A fantastic opportunity has arisen for a SOC Shift Lead to join a secure, multi-national Information Management and Cyber Security function, supporting the protection of critical systems within a 24x7 defence environment. This role performs the duties of a senior operational SOC lead and reports directly to the SOC Manager, providing continuity, quality assurance, and leadership across rotating analyst teams. Key Responsibilities: • Provide live operational oversight across rotating SOC shifts, ensuring continuity, quality, and procedural compliance, • Review, quality assure, and validate analyst triage decisions, case notes, and escalation handling, • Ensure effective and consistent shift handovers through clear communication and robust documentation standards, • Act as a mentor and escalation point for Tier 1 and Tier 2 analysts during live operations, • Support alignment between SOC operations, threat intelligence, and incident response functions, • Capture operational metrics relating to alert handling efficiency, response delays, and quality issues, • Identify procedural gaps and contribute to the improvement of SOC playbooks, SOPs, and workflows, • Assist the incident response function with investigations requiring escalation to embedded internal stakeholders The ideal candidate would have: • A strong career background in Cyber Security within an operational SOC environment, • Experience mentoring, coaching, or providing quality assurance to SOC analysts, • The ability to lead by example and uphold standards within high-pressure operational settings, • Excellent written and verbal communication skills for escalation, reporting, and documentation, • A collaborative mindset with the confidence to engage with management, intelligence, and response teams The ideal candidate must have: • Broad security awareness across IT, with strong experience in Network Security and Infrastructure, • Working knowledge of Operating Systems and Applications from a security perspective, • Demonstrable understanding of the OSI Reference Model and network communication protocols including DNS, HTTP/S, SSL, SMTP, FTP/S, and LDAP/S, • Hands-on experience with SIEM platforms and/or Network Packet Capture tools, • Eligibility to obtain and maintain UK security clearance This position offers a comprehensive benefits package, which includes but is not inclusive of: • Company bonus scheme (based on company performance), • Annual pay reviews and promotion reviews (based on personal performance), • Enhanced overtime rates, • Flexi-leave of up to 15 days, • Pension scheme with total contributions of up to 14%, • Subsidised on-site facilities and restaurants, • Free on-site parking, • Excellent career progression, training, and long-term development opportunities If this role looks like your next challenge, please contact Keelan ASAP or apply via this advert. Please note that due to the nature of the client’s business, only candidates who currently hold full British Citizenship (without limitations) or Dual Nationality inclusive of British Citizenship will be considered. We endeavour to reply to every candidate, every time. If you have not heard back within 10 days, please assume you have unfortunately been unsuccessful for this position or that the role has been filled. Please feel free to call the office or send an email to discuss other potential opportunities.

This role involves optimizing incident response workflows using Microsoft Sentinel and creating automation to improve security posture. Ideal candidates should have hands-on experience with Microsoft Sentinel, API development skills, and a technical understanding of IT infrastructure.

In this senior role, you will leverage your extensive experience in digital forensics to provide forensic incident response solutions. A leading business consultancy is seeking an Associate Director for their Digital Forensics and Incident Response team in London.

Support incident response activities across AWS‑based systems. Develop and improve detection logic and response workflows. Write Python scripts for automation, enrichment, and response.

The successful candidate will act as the primary contact for security alerts, investigate potential incidents, and work closely with IT teams and external providers. The role includes monitoring systems, responding to cybersecurity incidents, and supporting compliance activities.

Continuously develop a high‑performance technical response team and lead the Incident Response Efforts: Oversee the end‑to‑end incident response lifecycle, from detection and containment to eradication, recovery, and post‑incident analysis. Develop and Refine Response Plans: Design, implemen

This role involves monitoring for indicators of compromise, responding to security incidents, and supporting improvements in the detection and response processes. Candidates should have experience in incident response and an understanding of cloud environments.

Incident Response Engineers are primarily tasked with providing escalated remote support and project delivery to our Incident Response clients. Incident Response Engineers work as part of a dynamic, flexing team – ready to respond at a moment’s notice and take part in a rotating on-call rotation

This permanent position requires leading a team of analysts, overseeing cybersecurity incident responses, and maintaining high standards across CSIRT activities.

The ideal candidate will have extensive experience in incident response and cybersecurity operations. This role involves leading teams, developing response plans, and ensuring effective communication during incidents. Manager of Incident Response to oversee the cybersecurity operations at their Glob

A leading consulting firm in Greater London is seeking experienced professionals to join their Digital & Data team.In this role, you will design and deliver cyber attack simulations and resilience exercises to enhance clients' operational capabilities.The ideal candidate will have a strong backgroun

A prominent cloud solutions provider is seeking a Principal Security Analyst specializing in Incident Response to secure large-scale SaaS environments. This role involves leading response efforts during security incidents, developing efficient processes, and leveraging expertise in cybersecurity.

A leading security services provider is seeking a SOC Alarm Response and Investigations Controller to oversee incident management and alarm responses in Basingstoke.

This pivotal role involves collaborating with engineers to embed secure-by-design principles, managing security incidents, and overseeing compliance with standards.

A prominent health and care regulator in the UK is seeking a Security Operations Analyst to protect sensitive information and manage cyber incidents.

A leading retail company in the UK is looking for a Security Analyst to join their Security Incident Response Team. The role involves monitoring security controls, responding to incidents, and conducting forensic investigations.

Manage cyber incident responses and incident response teams. The EMEA Cyber Security & Privacy practice is growing and has ambitions to expand its capabilities from a strong base in incident response, intelligence and investigations into additional proactive security, AI security and managed detecti

Previous experience in a similar Cyber Incident Response Analyst role, preferably in a senior or lead capacity. Proven leadership in incident response within SOC settings. Principal Cyber Security Incident Response Analyst.

Conduct security investigations and lead security incident response in a cross‑functional environment and drive incident resolution. Security Incident Response and Detection & Response Engineering in a large, regulated organization. Develop Incident Response initiatives that improve our capabiliti

Join to apply for the Senior Incident Response Security Engineer role at Prima. To fuel this growth we need a Security Engineer focused on Incident Response to join our Security Team. Automate security alerts triage and Incident Response playbooks.

The role involves leading investigations into high-severity security incidents, managing incident response activities, and providing technical leadership to the team. A global financial group is seeking a Vice President, Senior Incident Response Analyst in Greater London. Candidates should have a st

A leading recruitment agency is seeking a Cyber Security Lead to oversee the security lifecycle within the Money and Pensions Service.This pivotal role involves safeguarding digital infrastructure, ensuring compliance with cybersecurity standards, and managing third-party security providers.The idea

A prominent media organization in London is seeking a Cyber Security Engineer to shape the security engineering strategy within their InfoSec team.This role involves configuring and maintaining security infrastructure, conducting risk assessments, and collaborating with stakeholders to enhance secur

Responsibilities include monitoring for intrusions, managing incidents, and liaising with third-party service providers.

Candidates should have a degree or equivalent experience, strong IT incident resolution skills, and the ability to work autonomously. This role involves 24/7 monitoring, incident detection, and resolution of issues across technology and digital services.

This hybrid role involves investigating and remediating cyber incidents using tools like Splunk and requires solid experience in incident response and threat hunting.

Candidates should have a minimum of 3 years in cybersecurity operations, focusing on threat detection and incident response.

This role involves monitoring security platforms, performing incident analysis, and conducting vulnerability assessments.

Collaborate with the Global Incident Response team to assess cross-regional impact and coordinate response efforts. Operate under the Incident Response (IR) function, reporting to the IR Lead, with responsibility for leading investigations into high-severity security incidents. Manage and coordinate

A leading asset management firm based in London is seeking a Senior Cyber Defence Operations Analyst to oversee incident response and vulnerability management processes.

Operate under the Incident Response (IR) function, reporting to the IR Lead, with responsibility for leading investigations into high-severity security incidents. Collaborate closely with the Global Incident Response team to assess cross-regional impact and coordinate response efforts. Drive post-in

A global payments technology company is seeking a Senior Cybersecurity Analyst focusing on incident response. Candidates should have at least 3 years of SOC experience, strong knowledge in incident response and threat analysis, and a relevant Bachelor's degree. In this role, you’ll manage cybersec

The role involves incident management, collaboration across security functions, and applying threat modeling.

A leading UK construction firm is looking for a Senior Information Security Engineer to lead a dynamic cyber security team in Leicestershire.This role involves hands-on leadership in safeguarding the organization’s digital assets while ensuring strong cybersecurity operations.Responsibilities incl

We know incident response can be intense, and we look after our people accordingly. Investigator - Cyber Incident Response. At Accenture, our global Incident Response team takes on some of the hardest and most meaningful challenges in cyber security.

A leading cybersecurity firm is seeking a Principal Consultant in the UK for a full-time role focused on incident response and digital forensics.

The Discovery and Data Insights department is the hub of all technical consulting and you will provide digital forensics and incident response solutions for matters which involve cyber response investigations, digital forensic investigations, eDiscovery and data analytics. Associate Director, Digita

Ideal candidates will have a Bachelor's in Cybersecurity and extensive experience in security operations, Linux administration, and incident response. This role involves monitoring security events, developing response procedures, and maintaining cloud security.

A leading consultancy firm in Greater London is seeking an Associate Director to lead technical investigations on cybersecurity breaches and digital forensics.This hybrid role emphasizes both hands-on investigation and strategic leadership, requiring strong DFIR experience and exceptional communicat

Candidates should have expertise with Microsoft Defender for Cloud, Azure Sentinel, and incident response leadership. Responsibilities include leading investigations of security incidents, improving cloud security posture, and overseeing vulnerability management processes.

The role involves monitoring real-time security alerts, triaging incidents, performing malware analysis, and preparing security reports.

The ideal candidate will manage cyber incidents, provide expert advice on security and collaborate across teams to enhance security measures.

The new hire will own the incident management process and serve as the point of contact for major incidents.