Incident response jobs in WatfordCreate job alerts

SOC Shift Lead - Watford, UK • Up to £75k depending on experience, • On site 4 days on, 4 days off, • Active SC clearance required ABOUT THE CLIENT Our client operates at the forefront of Cyber Security within highly secure and regulated environments across defence and critical infrastructure. They are continuing to invest in their Security Operations capability and are seeking an experienced SOC Shift Lead to play a key role in driving operational excellence and team development. THE BENEFITS • Lead a SOC team supporting critical national infrastructure, • Opportunity to lead and mentor a growing SOC team, • Exposure to complex, high impact environments, • Ongoing training and professional development THE SOC SHIFT LEAD ROLE As SOC Shift Lead, you will direct a team of SOC Analysts, taking ownership of monitoring, triage and investigation of security events across critical infrastructure. You will provide hands on technical leadership while also developing team capability and improving detection maturity. You will analyse network traffic, logs and host based events, enhance detection rules aligned to MITRE ATT and threat informed defence, and represent the SOC in partner meetings. This is a hands on leadership role requiring both technical depth and strong people management skills. SOC SHIFT LEAD ESSENTIAL SKILLS • Proven experience within a Security Operations Centre, • Previous line management or team leadership experience, • Strong hands on experience with Microsoft Sentinel and Splunk, • Solid understanding of MITRE ATT and threat informed defence, • Strong networking knowledge including TCP IP, LAN, WAN, SMTP, HTTP, FTP, POP and LDAP, • Experience investigating host and network based security incidents, • Eligibility for DV clearance, • Ability to work on site in Watford on a shift basis TO BE CONSIDERED Please either apply through this advert or email me directly via . For further information please call me on 07719 065949. By applying for this role, you give express consent for us to process and submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared, NSD

Job Role Operational Resilience & Crisis Management Associate responsible for supporting the prevention and management of disruptions to critical services. The role supports the Head of Operations in developing and embedding the Operational Resilience Framework, implementing the Bank’s Operational Resilience Management Program, and identifying gaps in processes and controls. Key Responsibilities Operational Resilience • Develop, review, and coordinate implementation of the Operational Resilience Policy and action plans., • Design and implement controls and procedures in response to regulatory, operational, and technology changes., • Support and coordinate the Business Impact Analysis (BIA) process, including training stakeholders, validating inputs, identifying critical assets, and producing consolidated reports., • Act as first-line point of contact for Operational Resilience matters., • Coordinate third-party resilience assessments., • Participate in incident management, project risk reviews, and governance reporting., • Represent the Bank in Group Operational Resilience programs and working groups., • Support oversight of Cyber Resilience, IT Resilience, and Business/IT Continuity., • Assist with testing, training, workshops, and embedding a strong Operational Resilience culture., • Collect, maintain, and report management information (MI) for Senior Management and the Board., • Support the design, implementation, and maintenance of Business Continuity standards and plans., • Coordinate internal and external recovery arrangements., • Assist with BCP training, testing, reporting, and annual test oversight., • Support the design and implementation of Outsourcing (SYSC 8) frameworks and standards., • Assist in embedding regulatory requirements, audit findings, and outsourcing policies., • Conduct oversight and annual reviews of outsourcing contracts., • Support outsourcing training, MI collection, and Board reporting.

OCC Supervisor Warwick Permanent Contract Full Time Salary (£33,603.00 - £39,276.00) Those currently eligible on the redeployment register will be given prior consideration. The main purpose of the role is to Supervise staff and the overall performance of the Operations and Communications Centre ensuring that a high-quality service is delivered to members of the public, police officers and partner agencies across Warwickshire Police. Ensure that the response to all incoming contact is managed effectively meeting organisational and national standards, prioritising the highest risk Main Responsibilities: Effectively supervise the management of calls for service and management of incidents, ensuring that service delivery standards are met and prioritisation is given to those most vulnerable. The initial assessment, authorisation and management of incidents where a vehicle pursuit is required, in line with APP Roads Policing. To support the analysis and interpretation of performance data and identify recommendations for continual improvement of service. To deliver and monitor operational quality assurance, dealing with escalations and internal/external complaints relating to service delivery ensuring compliance with national policies, guidelines and Force service standards. To supervise staff and ‘real time’ contact demand, utilising all available performance management tools. Maintain sufficient staffing levels to meet service demand as required by internal and external customers. To provide operational support to the FIM (Force Incident Manager) as required in relation to management of major and critical incidents. Work with stakeholders to ensure service delivery is maintained within the OCC through any system outages, implementing full Business Continuity Plans/Disaster recovery, including that of the critical 999 lines to ensure that Warwickshire Police emergency service is maintained at all times. To be responsible for people management activities, including absence management, performance reviews, providing and delivering evidence for furtherance of capability and disciplinary procedures. To maintain up-to-date knowledge of IT systems, security of information and working practices. To conduct employee communication briefings, encourage team working, share best practice and develop level of competence of OCC staff through mentoring and coaching. To manage small projects To undertake other duties commensurate with the nature, level of responsibility and grading of this post, as required. Knowledge: 5 GCSE’s at Grade A-C or equivalent, including English Language and Maths. NVQ Level 3 Supervisory qualification or equivalent. Desirable: Knowledge of National Contact Management Principles and Guidelines, National Standards of Incident Recording and Incident Deployment Principles. Experience: Proven experience of managing staff in a supervisory capacity within a contact centre / emergency service environment. Experience of mentoring, tutoring and/or coaching staff. Desirable: Management of small projects. Key Skills: Ability to analyse and interpret performance reports, supported by IT Systems. Proven ability to work to strict deadlines, managing a variable and diverse workload. Proven ability to communicate verbally and in writing with a wide range of people, including conducting employee briefings. Ability to analyse, review and present information in various formats. Ability to work on own initiative and as part of a team. Coaching and Facilitation Skills. Objective thinking, good investigation, problem solving and decision-making skills. Proficient in use of IT systems including Microsoft Office. Special Conditions: Shift working over a 24/7 period including night working Dealing with disturbing/unpleasant situations DSE Assessor Trained Fire Co-ordinator and First Aid at Work duties We want our organisation to be as diverse as the community it serves. We welcome applicants from all sections of the community. You will be required as part of Warwickshire Police recruitment process to successfully complete vetting and credit checks.

As SOC Shift Lead, you will direct a team of SOC Analysts, taking ownership of monitoring, triage and investigation of security events across critical infrastructure. SOC SHIFT LEAD ESSENTIAL SKILLS. SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response

A leading cybersecurity firm in the UK is looking for a skilled SOC Analyst to enhance its 24/7 operations.

This role involves system monitoring, incident management, and team collaboration in a 24x7 shift environment.

The role involves responding to incidents and providing high-quality customer service while working as part of a team.

A forward-thinking technology operations team in Watford seeks an experienced Major Incident Manager. This role involves ownership of major technology incidents and coordinating resources to ensure swift resolutions. Join a supportive team and make a significant impact on incident management process

In this role, you will lead daily operations, investigate cybersecurity incidents, and monitor emerging risks.

A cybersecurity consultancy is seeking an Engagement Lead for their Cyber Incident Response team. The successful candidate will manage project scopes during cyber incidents, ensuring effective responses to cyber-attacks.

A leading retail company is seeking a skilled SOC Analyst for its Security Operations Centre.This full-time hybrid role involves monitoring, analyzing, and responding to security events across multiple environments.Ideal candidates should have over three years of experience in SOC roles, be proficie

A leading managed security service provider in Dacorum seeks a SOC Shift Lead to mentor a team of SOC Analysts while ensuring efficient incident response and operational delivery. This site-based role involves leading security alert monitoring, triaging incidents, and improving security processes as

Security Operations Centers (SOC), Product Security Incident Response Teams (PSIRT), and Computer Security Incident Response Teams (CSIRT). Act as an incident commander to drive incidents through the entire response lifecycle. Design and maintain a portfolio of security alerts, automated actions, pl

A leading cybersecurity consulting firm in the UK is seeking a Cyber Incident Response Consultant to enhance its cyber maturity through strategic documentation efforts. The role involves collaborating with stakeholders to create operational incident response vehicles, conducting thorough assessments

A financial security firm in Greater London is seeking a skilled cybersecurity professional to enhance their security posture.You will conduct assessments, implement controls, and collaborate with engineering teams on secure design.With over 4 years of experience required, strong knowledge in applic

A cybersecurity solutions provider is seeking an Incident Response Consultant in the Midlands. The role involves leading the response to security incidents, analyzing logs, and developing strategies to improve resilience against cyber threats.

Cyber Security Incident Response Team (CSIRT) Manager. Cyber Incident Response Team (CIRT) Manager. This is a rare greenfield opportunity to build and shape the incident response operating model from scratch—working alongside a newly onboarded MSSP while setting the foundations for a future intern

A cybersecurity firm is seeking a Senior DFIR Consultant to provide expert incident response services, perform advanced forensic analysis, and support investigations. The ideal candidate will have 2-4 years of experience in incident response, proficiency in scripting and various forensic tools, and

A cyber security firm is looking for a seasoned Cyber Security Analyst specializing in Managed Detection and Response (MDR). You will be responsible for responding to cyber security incidents, developing playbooks, and monitoring security logs.

The role involves incident management, collaboration across security functions, and applying threat modeling.

Security Operations Center (SOC), you will fit into a global team that provides 24x7 monitoring and incident response, acting as the frontline for attacks against the firms' infrastructure. Minimum of 3 years of experience working in information security, with a focus on security operations center (

Candidates should have a minimum of 3 years in cybersecurity operations, focusing on threat detection and incident response.

A leading tech firm in the United Kingdom is seeking a SOC Shift Lead.This role involves monitoring and triaging security alerts for critical infrastructure.You will manage a team while analyzing network traffic and logs to identify threats.The position is based in Hemel Hempstead with a shift patte

This role involves monitoring premises, conducting patrols, and responding to incidents to maintain a safe environment.

Responsibilities include incident management, team mentorship, and operational improvements.

A leading healthcare provider in the UK is seeking a Hospital Safety Team Supervisor to deliver protection for patients, staff, and visitors.The ideal candidate will oversee the team, ensuring safety and compliance with protocols while assisting in managing quality standards within the department.Th

As a Response Associate (Technical Lead), you will deploy your incident response expertise in a senior delivery role across our incident response services. Overseeing host- and network-based incident response investigations:. Direct experience working in an incident response team is beneficial but n

The successful applicant will manage incident reviews, collaborate across various levels, and implement solutions to mitigate risks for colleagues and customers.

We will prioritise candidates with demonstrable digital forensics and incident response ('DFIR') experience, especially those that have worked in an incident handling capacity before. We think candidates with the following skills and experience are likely to succeed as Incident Response Engagement L

A government department in the UK is looking for an Incident Manager to oversee Major IT Incidents, ensuring prompt service restoration and maintaining quality.

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and too

A leading construction firm is seeking a Fire Officer to monitor fire control systems and conduct safety patrols at their facilities.The ideal candidate will have at least 2 years' experience in firefighting and familiarity with fire safety regulations.This position demands physical fitness, good co

A NHS Trust organization based in the United Kingdom is seeking a Hospital Safety Team Supervisor to ensure a safe environment for patients, staff, and visitors.The successful candidate will supervise the Hospital Safety Team, manage security operations, and assist in quality standards.A background

The ideal candidate will possess a strong understanding of cybersecurity principles and incident response protocols. A leading technology company in the United Kingdom is hiring a SOC Security Analyst to monitor, analyze, and respond to security incidents.

When not responding to breaches, you will conduct enterprise threat hunting, help clients develop incident response plans, facilitate tabletop and purple team exercises as well as provide other strategic security services related to incident response. Recommend appropriate course of action to suppor

In this role, you will monitor security alerts, investigate phishing attacks, and support incident responses.

A leading cybersecurity recruitment firm is looking for a Cyber Incident Response Lead to enhance incident response capabilities across a major organization. This hands-on role requires a strong background in incident response and digital forensics, with responsibilities including leading investigat

A leading IT and Cyber Security provider in the UK is seeking a Cyber Security Analyst L3 to join their growing SOC team.The ideal candidate will conduct in-depth investigations, manage complex alerts, and mentor junior analysts.Applicants should possess proficiency in security tools such as CrowdSt

A leading technology firm in the United Kingdom is seeking an experienced IT Security professional to manage and implement robust security strategies across cloud environments and applications.The ideal candidate will have 3–5 years of experience in IT security or SecOps, strong knowledge of cloud

This role involves supporting information security risk management and compliance, collaborating with stakeholders on security risk mitigation, and leading incident response efforts.

A leading UK tech company is looking for a Senior SOC Analyst to lead major security incident responses and enhance the overall SOC capability. The role involves incident response, threat hunting, malware analysis, and producing high-quality reports.

A leading cybersecurity firm in the United Kingdom is seeking a Senior Cyber Incident Response Analyst to manage incident response activities, conduct detailed analyses, and provide proactive client services. The ideal candidate will have experience in incident management, a solid understanding of m

The role requires expertise in implementing security strategies, responding to incidents, and managing access control systems.

Incident analysis, combining sound analytical skills with advanced knowledge of cybersecurity, digital forensics and incident response. Specialised experience in cyber incident response and cyber incident management. Consultant | Cybersecurity - Incident Response | Forensic & Litigation Consulting.

Key responsibilities include developing emergency plans, overseeing incident management, and managing a multi-disciplinary team. A local council in London is seeking a Head of Incident Management & Emergency Planning.

The ideal candidate should have over 3 years of incident response experience, strong analytical skills, and the ability to communicate effectively. This role involves monitoring security incidents, conducting investigations, and collaborating with teams to enhance security measures.

A leading cloud services provider is seeking an AWS Incident Response Team Analyst in Greater London. This role involves overseeing physical security operations, responding to incidents, and reporting.

Cyber Incident Response Lead (Contract). Lead and conduct full incident response investigations: triage, containment, eradication and recovery. Incident Response, Digital Forensics, Threat Hunting or SOC L3.