Incident response jobs in ChichesterCreate job alerts

About the job Job summary Threat and Vulnerability Manager This role is for an experienced professional in vulnerability management and threat intelligence to join our Cyber Operations team. You will work closely with colleagues across the organisation to further mature and continuously improve our cyber defence capabilities. Cyber Operations forms part of a wider, well established security function operating within a highly regulated environment. In this role, you will lead and continuously enhance the management of vulnerability assessments across our hybrid IT estate. You will prioritise remediation activities using a risk based, threat informed approach, collaborating with stakeholders to strengthen the security posture of our systems and services. You will also develop and mature our threat intelligence capability, identifying and maintaining relevant intelligence sources to inform tactical, operational, and strategic decision making. You will produce and share high quality threat intelligence products with internal and external stakeholders and use this intelligence to support vulnerability management and threat hunting activities. Additionally, you will contribute to incident response processes and provide support to colleagues responsible for the IPO's protection, detection, and response capabilities. If you have strong relevant expertise, excellent communication skills and a collaborative working style we would love to hear from you. Working Style This role will be carried out in-line with IPO Hybrid working arrangements where staff are currently expected to spend at least 20% of their time working onsite from one of our offices. This role is based in our Newport Office . The requirement for attendance at an office location can vary by role so we would encourage candidates to discuss working arrangements with the recruiting manager to agree a reasonable balance between working from home and the office. Job description Main duties consist of but are not limited to: Vulnerability Management (Primary Focus) • Lead and enhance the organisation's vulnerability management programme, including our Penetration Testing programme across a complex hybrid IT environment covering both infrastructure and applications. This will include scoping, scanning, prioritising work, engaging with stakeholders, and ensuring remediation activities happen in a timely fashion., • Prioritise vulnerabilities using a riskbased, threatinformed approach to support organisational objectives, regulatory requirements, and audit needs., • Oversee the full lifecycle of vulnerabilities, including triage, mitigation planning, remediation recommendations, and stakeholder coordination., • Develop and maintain vulnerability management policies, procedures, standards, and best practice guidance. Threat Intelligence • Produce high quality tactical, operational, and strategic intelligence assessments and briefings using analysis and interpretation of current threat intelligence. Utilising and liaising with internal stakeholders, commercial sources, open-source intelligence and government partners to provide a rounded, comprehensive view of the current threat landscape., • Lead initiatives to strengthen the organisation's intelligence capability and participate in information sharing communities. Cyber Risk Management • Play an integral part in Cyber Security risk management, conducting risk and threat assessments aligned with regulations. Using your knowledge of standards and expertise to support our stakeholders by providing pragmatic and proportionate advice and best practice guidance. Metrics & Reporting • Develop and maintain actionable metrics that demonstrate the effectiveness of the organisation's vulnerability management and threat intelligence capabilities. Incident Response Support • Contribute to and enhance our incident response processes, representing Cyber Security in operational incident calls, keeping stakeholders informed and liaising with government bodies to ensure timely and effective management of threat intelligence and threat hunting. Person specification Essential Technical • Strong understanding and experience of vulnerability management, threat intelligence and security operations within a complex enterprise environment, • Experience of managing and developing penetration testing programs, • Knowledge of secure development practices and where security testing for vulnerabilities fits into the Software Development Lifecycle (SDLC), • Broad technical knowledge, especially around hybrid and cloud architectures, identity management and application security. Essential Experience • Highly organised and self-motivated, able to manage and deliver on multiple concurrent tasks., • Excellent communication and interpersonal skills. Ability to interact with stakeholders of all levels with the ability to explain complex security concepts to non-technical audiences., • A team player who is enthusiastic about contributing to the overall success of the team and collaborating with stakeholders of all levels., • Sense of urgency and an ability to respond to tasks proactively and promptly., • Continually stay abreast of emerging security technologies, threats and trends. Self-motivated to drive their learning needs. How to Apply Click the 'Apply now' button and complete the application form by providing the following: Your CV • Upload an anonymised copy of your current CV. Please remove all identifying markers such as name, title, education institution etc., • Make sure it clearly shows how you meet the essential criteria listed in the Person Specification. 500-word Personal Statement • Use this to explain why you're suitable for the role ., • Structure your statement around the essential criteria in the Person Specification., • Make sure to provide clear examples to show how you meet each requirement. Technical • Provide a 250-word example that demonstrates your technical ability:, • Penetration testing (focussed on managing penetration testing programs rather than conducting the tests yourself) :, • Level - Practitioner, • Make sure it aligns with the Technical criteria listed in the Person Specification. Penetration testing - UK Government Security - Beta For further information on the sift and interview stages of this recruitment campaign, please head to our 'Things you need to know' section below. Please visit our Civil Service Careers page - IPO - Recruitment Support , Civil Service Careers (civil-service-careers.gov.uk) If you require job-specific information, please contact Dominic Read E-mail: Telephone: Behaviours We'll assess you against these behaviours during the selection process: • Seeing the Big Picture, • Managing a Quality Service, • Changing and Improving Technical skills We'll assess you against these technical skills during the selection process: • Penetration testing (focussed on managing penetration testing programs rather than conducting the tests themselves) : Level - Practitioner Penetration testing - UK Government Security - Beta Benefits Alongside your salary of 47,766, Intellectual Property Office contributes 13,837 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides. • Unlimited Pluralsight video learning access, • Access to Microsoft's ESI training suite, • Hybrid working with no core hours, • Substantial support for career progression, • 25 days annual leave moving to 30 days in annual increments, • You will also get 8 days public leave and 1 day privilege leave For more information about what's on offer at the Intellectual Property Office please review our IPO benefit pack attached to the bottom of this advert. Please note that benefits may be subject to change. Things you need to know Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use. Selection process details This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills. Additional details on security and vetting Successful candidates must pass a disclosure and barring security check and if successful you must also hold, or be willing to obtain, a higher Security Clearance . For meaningful checks to be carried out individuals will need to have lived in the UK for a sufficient period of time, depending on the level of clearance, to enable appropriate checks to be carried out and produce a result which provides the required level of assurance. For this role the successful individual will need to have consistently lived in the UK for a minimum 5 years in order to meet the relevant security clearance. Further information on the vetting process can be found at National security vetting: clearance levels - GOV.UK If you have questions regarding this or are unsure if you meet the eligibility criteria, please contact The assessment process will comprise of the following: Stage 1 - Sift An initial sift of applications will be carried out to create a shortlist. This will be based on the evidence provided for the following Success Profile elements: Experience Your CV will be used to assess your suitability for the role and your 500 word Personal statement will demonstrate your Experience against the essential criteria listed person specification. Technical Provide a 250-word example that demonstrates your technical ability against the Technical criteria listed in the Person Specification. Penetration testing - (focussed on managing penetration testing programs rather than conducting the tests yourself) : Level - Practitioner Stage 2 - Interviews If invited to interview Behaviours, Experience and Technical based questioning will be used. Please note candidates that proceed to the interview stage will be required to deliver a presentation against the Technical Success Profile. Further details will be provided in the invite to interview information. Specific information regarding the Success Profile elements that will be assessed at interview will be contained within the interview invitation. Interviews for this role will be carried out in person at our Newport Office. This recruitment campaign will keep a reserve list for 12 months. If you meet the requirements for this role but aren't offered after passing the interview, you'll be placed on the reserve list. If a suitable position opens up during this time, we will reach out to individuals in merit order. The successful candidate would be expected to remain in the role for a minimum of 12 months before applying for another role. Applicants to note: CVs sent direct to the IPO will not be accepted. There may be important information contained within the job role profile candidates may also wish to refer to. We recommend candidates download and save a copy of the role profile for reference. This post is being advertised to Internal , across Government and external candidates at the same time. Incomplete and/or late submissions will not be accepted or considered. Feedback will only be provided if you attend an interview or assessment. We do not routinely reimburse travel expenses for candidates, however if participating in the selection process would cause you undue financial hardship or if it restricts your ability to participate, please contact the recruitment team for more information. In line with Government guidance, successfully appointed candidates will need to provide documents for our Right to Work checks. Information on this will be sent within the invite to interview text. If you require a reasonable adjustment at any stage of the recruitment process, then please let the recruitment team know via; Please be aware that only one application per candidate is permitted for each recruitment campaign. Multiple applications, including those made using different accounts, may result in your application being withdrawn or rejected at any stage of the process. For more information on the IPO's terms and conditions, please review the attached IPO Modernised Terms and Conditions document attached at the bottom of this advert. Feedback will only be provided if you attend an interview or assessment. Security Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window) . See our vetting charter (opens in a new window) . People working with government assets must complete baseline personnel security standard (opens in new window) checks. Nationality requirements This job is broadly open to the following groups: • UK nationals, • nationals of the Republic of Ireland, • nationals of Commonwealth countries who have the right to work in the UK, • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window), • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS), • individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020, • Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service Further information on nationality requirements (opens in a new window) Working for the Civil Service The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants. We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window) . The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy. Diversity and Inclusion The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window) .

Lead Incident Response Consultant – CNI & Industrial Cyber (Remote). We are partnering with a well-regarded UK Cyber Security consultancy evolving their OT incident response practice. This is a rare opportunity to own and develop a specialist OT Incident Response service line, bringing to market a

Security+ or similar Cyber Security/Incident Response related certifications. Experience analyzing, triaging, and remediating common information security incidents. SecOps plays a critical role in safeguarding Google's public sector customers by proactively monitoring, detecting, and investigating s

Your responsibilities will include managing day-to-day operations, leading major incident responses, and improving documentation and processes.

In this role, you will provide 24/7 monitoring and incident response, acting as the first line of defense against attacks.

In this role, you will protect the firm's digital assets and manage complex cybersecurity incidents.

The ideal candidate will manage security monitoring, incident response, and operational activities across distributed teams.

CyberCX Pty Ltd is seeking a Lead Investigator in Digital Forensics and Incident Response.

A leading financial services firm in Greater London is looking for a SOC Analyst to monitor and respond to security incidents.

This pivotal role oversees a team of 300, managing incident response and operational excellence for the busy M25 motorway.

Harrington Starr in Greater London is looking for a Security Lead to enhance their security team.This role involves technical and strategic leadership to bolster the company's security posture.Responsibilities include managing security platforms, auditing controls, and leading penetration testing.Th

Lead Investigator - Digital Forensics and Incident Response.

You will oversee the investigation of security incidents and drive improvements in incident response strategies. Justice Digital is looking for an Incident Response Principal Analyst to lead and mentor a SOC team. Candidates should have substantial experience in a SOC environment and the ability to

Conduct day‑to‑day Incident Response activities as well as additional SOC related detection and response activities as required for a global environment. Expertise building workflows and playbooks to facilitate the Incident Response process. A minimum of 8+ years in Information Technology, ideal

S-RM is looking for an Incident Response Engagement Coordinator in London to support their Incident Response teams. The successful candidate will own and coordinate the administrative and operational activities necessary for cyber incident response engagements, ensuring cases are launched and manage

The ideal candidate will have strong experience in incident response and operational metrics.

A global financial services firm is seeking an Incident Response Manager for its cyber threat division. You will lead a team of Cyber Threat Analysts and oversee incident management, ensuring compliance with established processes and tools. The role requires experience in cyber responses and team ma

A global tech company in Cambridge is looking for a Physical Security Specialist to enhance their security capabilities.The role involves developing and implementing security strategies, leading site assessments, and managing technology strategy.The ideal candidate will have recognized Physical Secu

Sophos Group is seeking a Team Lead for Threat Operations to lead a high-performing Threat Analysts team within our 24x7 Managed Detection and Response environment. The role combines leadership with technical expertise to ensure operational excellence in threat detection and response.

You'll conduct security assessments, design and implement security tooling, and respond to incidents.

ASOS is recruiting for a Security Operations and Incident Response Specialist to protect against cyber threats.

This position focuses on safeguarding high-security environments through incident response and proactive monitoring.

The role requires a deep understanding of cyber incident response and experience with various security tools.

Vector Resourcing is seeking a SOC Analyst to enhance security across the Group IT Infrastructure.This position will focus on improving security capability within a long-established environment while providing clearer visibility of risks.The role involves leading security monitoring, improving the S

Incident Management: Investigate and resolve issues, apply known fixes, and follow through on tasks with accountability.

This hybrid role features responsibilities like overseeing incident response and guiding analysts during investigations.

A cybersecurity consultancy is seeking an Engagement Lead for their Cyber Incident Response team. The successful candidate will manage project scopes during cyber incidents, ensuring effective responses to cyber-attacks.

This role involves leading incident response efforts, proactively hunting for threats, and conducting thorough forensic analysis.

The position involves incident response, proactive monitoring, and improving operational security. Key responsibilities include managing security incidents and improving vulnerability processes.

As a Response Associate(Technical Lead), you willdeploy yourincident response expertise in a senior delivery role across our incident response services. OurIncident Response Associatesare a critical part of our Cyber Security division’s success. Leading technical incident response from first conta

We are looking for an experienced Incident Response - Recovery Specialist to join our incident response team. While the role is primarily aligned to incident response work, it is not limited to live incidents alone. Supporting clients with ongoing incident response retainers and proactive recovery r

Incident Response Manager (Cyber Threat). A large global financial services firm is looking for an Incident Response Manager within its cyber threat division. Experience in a technical cyber/incident response role.

The role requires monitoring of security systems and responding to incidents while maintaining clear communication.

A leading tech firm in the United Kingdom is seeking a SOC Shift Lead.This role involves monitoring and triaging security alerts for critical infrastructure.You will manage a team while analyzing network traffic and logs to identify threats.The position is based in Hemel Hempstead with a shift patte

The role involves threat detection, monitoring alerts, and incident response, among other responsibilities.

A leading managed security service provider in Dacorum seeks a SOC Shift Lead to mentor a team of SOC Analysts while ensuring efficient incident response and operational delivery. This site-based role involves leading security alert monitoring, triaging incidents, and improving security processes as

A leading UK tech company is looking for a Senior SOC Analyst to lead major security incident responses and enhance the overall SOC capability. The role involves incident response, threat hunting, malware analysis, and producing high-quality reports.

As a Response Associate (Technical Lead), you will deploy your incident response expertise in a senior delivery role across our incident response services. Leading technical incident response from first contact through to closure:. Overseeing host- and network-based incident response investigations:

You will manage DNS and RADIUS infrastructures, lead incident resolutions, and collaborate with international teams to enhance network services.

Responsibilities include incident management, team mentorship, and operational improvements.

The role involves project planning, incident response management, and collaboration across teams to uphold security integrity.

The role involves performing forensics, assisting with incident response engagements, and producing high-quality reports. Candidates should have experience in incident response or information security and a relevant degree in fields such as Computer Science or Cybersecurity.

CYFOR is seeking an Incident Response - Recovery Specialist to join their team. The role involves assisting clients with recovery from cyber incidents and restoring critical services in both cloud and on-premise environments.

A leading cloud services provider is seeking an AWS Incident Response Team Analyst in Greater London. This role involves overseeing physical security operations, responding to incidents, and reporting.

The position offers a hybrid working model, requiring three days per week in the office and entails responsibilities related to threat analysis, network security, and incident response. The role involves managing and enhancing security controls, responding to incidents, and ensuring compliance with

CyberClan is seeking a full-time Cyber Security Analyst to join their Security Operations team.In this 100% telecommuting position, you will provide Tier 2 case resolution, respond to cyber security threats, and collaborate with clients to ensure security procedures are followed.The ideal candidate

This role involves leading responses to high-severity incidents, coordinating technical teams, and maintaining clear communication with stakeholders. A leading consultancy in Berkshire is seeking a Major Incident Manager for a 6-month contract. Candidates should have 6-10+ years of experience in inc

The ideal candidate will have substantial experience in incident response, cloud security, and hands-on security tooling implementation.