26 to 50 of 88 Incident Response Jobs in Manchester

site. You will act as the trusted on-site point of contact for users, local teams and the central networks function, handling the full incident spectrum from single-user issues to major outages, resolving service requests within change governance, and delivering small in-region projects. What … doing: Provide network incident support across the full severity spectrum, from single-user connectivity issues to major and global outages, diagnosing, troubleshooting and resolving connectivity problems. Coordinate incident response across teams when multiple users or critical services are affected, keeping stakeholders informed and driving issues through ...

complex infrastructure and production issues, troubleshooting across containers, networking, databases, and more, identifying root causes and improving platform reliability. Improve monitoring, logging, alerting and incident response processes, introducing proactive observability, operational runbooks and stronger disaster recovery procedures. Drive infrastructure automation through Infrastructure-as-Code and CI/… using tools such as Terraform, CloudFormation, AWS CDK, Bitbucket Pipelines or GitHub Actions. Strong understanding of database performance, caching, asynchronous workloads and production incident response, with the ability to troubleshoot across infrastructure, application and data layers. #J-18808-Ljbffr ...

optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python development, API integrations, and automated incident response workflows. In addition to automation engineering, you are responsible for deploying, maintaining and continuously improving MXDR solutions for our customers. You assess customer … learning are essential. We are looking for someone with experience across MXDR technologies, as well as a solid understanding of security monitoring, detection engineering, incident response, and platform integrations. As a customer-facing professional, you should be confident engaging with stakeholders at all organisational levels, both remotely ...

Microsoft, Google, AWS & Endpoints, including Ransomware Cases. Backed by substantial VC Funding, & now looking to Scale-Up, their Customers include Big Four Consultancy, Global Incident Response Specialists & Cyber Insurers. They are ISO 27001 & Cyber Essentials Plus Certified & have recently won a high number of Awards throughout 2026. They … Work in Fluid, Fast Growth Environments & Seed-Stage Temperament: Comfortable with Ambiguity & Building Process "as you go" Ideally Hands-On DFIR, SOC or Incident Response Experience Ideally Experience with IR Organisations, Consultancies, MSSPs or Cyber Insurers. Ideally Built Onboarding, Health Scoring or Renewal Playbooks from scratch. Searches: Customer ...

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

into a clear, practical and measurable programme, bringing teams together around one ambition: enabling the business to move forward with confidence. From security operations, incident preparedness and vulnerability management to governance, third-party risk and security-by-design, you’ll balance protection with customer experience, resilience and commercial priorities. … delivering our information security strategy and multi-year roadmap Embedding security-by-design across Architecture, Engineering, Product and Change Strengthening security monitoring, detection, response and incident preparedness Turning emerging threats and vulnerabilities into clear, prioritised action Giving senior leaders meaningful insight into cyber risk and business choices Strengthening ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

. As a member of the Starling SOC team, you will protect customers, assets and systems using the latest tech, with a focus on incident triage, response, investigations and threat hunting in a fast-paced fintech environment. #J-18808-Ljbffr ...

coverage across on-site and offshore support hours. Use SQL scripting, automation, monitoring, and observability tools to improve operational resilience, service health, reliability, and incident response. To be successful in this role, were seeking the following: Excellent SQL scripting skills. Strong scripting and automation skills using languages such … Proven skills and track record in AI automation, including the use of intelligent automation capabilities to reduce manual effort, improve operational efficiency, and enhance incident response workflows. Experience applying AI and automation solutions for alert correlation, anomaly detection, predictive monitoring, and service optimisation. Strong understanding of Site Reliability ...

alerting integrations, workbooks and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. Implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber … Architecture. Work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. Support the engineering and continuous improvement of security controls for end users, Azure workloads, cloud services, identities, workloads and non-human or agent identities. Integrate security ...

security or information security role Strong understanding of information security principles and risk management Hands-on experience with security monitoring and incident response Knowledge of Microsoft 365 and cloud security controls (e.g. Azure AD, Defender) Familiarity with regulatory and compliance requirements Ability to communicate technical risks clearly ...

Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation, AI and modern technology ...

code. Build CI/CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices and reviews that turn production issues into lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection … Experience with Terraform or comparable infrastructure-as-code tools. Knowledge of Docker, Kubernetes and CI/CD tooling. A solid understanding of observability and incident management. Strong cloud security knowledge and an understanding of operating within a regulated environment. An automation-first approach and confidence taking ownership ...

role where you'll be pigeonholed into one area of cyber security. You'll get exposure to vulnerability management, customer security reporting, governance, compliance, incident response, bid support and security operations, giving you a broad foundation to build an exciting career. Working from our Manchester office (three days … years' experience in cyber security or IT, along with a good understanding of topics such as vulnerability management, security risk, secure configuration and incident response. Just as importantly, you’ll be organised, collaborative and comfortable explaining technical concepts in a way that makes sense to different audiences. ...

technical role (e.g. TAM, Security Consultant) Experience engaging senior stakeholders (CISO, Head of IT/Security) Strong understanding of SOC operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability ...

initiatives. Assist with vulnerability management and remediation activities. Help clients improve their Microsoft Secure Score and overall security posture. Participate in infrastructure and security incident response activities. Administer and support Keeper Security password management environments. Promote best practice around privileged access management, password security and identity protection. Support ...

security controls. Improve security across endpoints, identities, applications, cloud services, and infrastructure. Support vulnerability identification, prioritisation, and remediation. Monitor security alerts and support incident investigation and response. Work with IT teams to resolve vulnerabilities, security weaknesses, and configuration issues. Maintain effective security controls and support Cyber Essentials, Cyber Essentials … Microsoft Defender technologies, including Defender for Endpoint and Microsoft 365 Defender. Experience supporting vulnerability management and remediation activities. Knowledge of security monitoring, alert triage, incident response, and technical investigation. Experience configuring or supporting security controls across cloud, endpoint, and identity platforms. Strong analytical and problem-solving skills with ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise these via the appropriate … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

architecture teams to improve platform capabilities and developer workflows. Mentor engineers and contribute to platform engineering best practices, governance, and technical strategy. Lead incident response, reliability improvements, root cause analysis, and operational maturity initiatives. Improve platform security, scalability, resiliency, and deployment efficiency across AWS, Azure, and GCP environments. ...

focus on performance, scalability, and cost efficiency. Take part in on-call rotations and own the operational health of high-availability production services, including incident response and post-incident improvements. Lead design reviews and code reviews, raising the quality bar across the team and mentoring mid-level ...

Operations: Instrument services with structured logging, metrics, and tracing, and define user-focused alerts. Establish service level objectives and report against them. Run incident response: triage, mitigate, restore, and document post-incident reviews with corrective actions. Machine Learning Operations: Package, version, and deploy models and dependencies ...

automation Manage Azure Key Vault, secrets, and certificate lifecycle processes Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, cloud operations, or managed services …/or ARM templates Azure DevOps and CI/CD pipeline experience Scripting and automation experience using Bash and/or PowerShell Strong troubleshooting, incident management, and problem-solving skills Why Join? Work with modern cloud, automation, and DevOps technologies Play a key role in driving Infrastructure-as-Code ...

provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defence. Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives. Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

network resilience. Experience managing and challenging MSPs and third-party suppliers. A hands-on background in security, patching, vulnerability management, disaster recovery and incident response. Experience operating within regulated or well-governed environments, ideally aligned to ISO 27001 or Cyber Essentials. The ability to communicate technical concepts and risk ...