26 to 50 of 203 Incident Response Jobs in the North of England

respond to, recover from and learn from cyber incidents. This is a varied position combining hands-on technical recovery testing with Business Continuity, Incident Response and Cyber Recovery planning. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

learn from cyber incidents. This is a varied position combining hands-on technical recovery, analysing, planning and testing and coordinating between Business Continuity, Incident Response and Cyber Recovery. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business Continuity … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

looking for a Cyber Security Manager to take ownership of cyber security across a complex organisation, leading the delivery of operational security, incident response, vulnerability management and cyber resilience initiatives. This is a hands-on leadership role reporting directly to the CIO, offering the opportunity to shape … security operations. What You'll Be Doing Leading and developing the organisation's cyber security function Managing and mentoring a Cyber Security Analyst Owning incident response and cyber security investigations Driving vulnerability management and remediation activities Overseeing security operations, monitoring and threat detection Managing and improving security tooling ...

help drive the next phase of security maturity. This is a fantastic opportunity for someone who enjoys a broad role combining security operations, governance, incident response, vulnerability management and stakeholder engagement, while leading a small but growing cyber function. What You'll Be Doing Leading the organisation … cyber security programme Managing and mentoring a Cyber Security Analyst Overseeing security operations, monitoring and incident response Driving vulnerability management and security improvements Managing and optimising security tooling including Microsoft Defender, Endpoint Security, Mimecast and Darktrace Working closely with senior stakeholders to improve cyber resilience Supporting security awareness ...

Security Operations Centre (SOC) in Liverpool on a 12-month fixed term contract. You will perform second and third line reviews, analysis, and incident response for security events, supporting external security partners and guiding end users in best practices across the business. The role requires strong experience … security operations, incident response, and detection engineering, with a focus on Azure/365 environments #J-18808-Ljbffr ...

operations, partners, service levels and governance into a clear global operating model. Strengthen identity, device, access, data protection, security testing, incident response and business continuity controls. Improve integration, adoption and training across core business systems, telephony, call-centre and clinical support platforms. Establish proportionate governance for AI, enterprise … strategy, infrastructure, cloud services, end-user support, device management and service performance. Own cyber security strategy, identity and access management, vulnerability management, penetration testing, incident response and security awareness. Maintain IT policies, procedures, acceptable-use and content controls, and the evidence required for audit or inspection. Lead business ...

will be a key part of the Security Operations Centre (SOC). The Security Operations Specialist provides Second and Third Line review, Analysis and Incident Response for Security events and incidents reported to the SOC, responding in line with agreed SLA's. The role directly supports our external … security reports to identify trends and working with teams to develop strategies to drive secure behaviours throughout the business Form part of the Cyber Incident Response team as a technical SME Maintaining and delivery of Phishing campaigns, reporting and remediation management Operational and Security maintenance of Security tooling ...

Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies. Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: Cloud Infrastructure/Security. Endpoint Detection and Response. Perimeter detection … tooling. Investigating and responding to security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. About your Skills We’re open-minded when it comes ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

conversation around what flexibility could look like for you. The roles main functional responsibilities include: Management of a small team of technical specialists delivering Incident, Threat, Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security … externally sourced services. Implement (and maintain) clear UK owned processes and procedures as required for all aspects of Operational Security Through team, lead the response to UK impacting security incidents and personal data breaches, problem solve and co-ordinate across relevant teams to drive a rapid return ...

Incident Management Analyst Contract: 12 months Location: Chester Working Pattern Training Phase - First 2 Months Monday to Friday 7:00am - 4:00pm UK time Operational Shift Pattern Once fully operational, the role will operate on a rotating shift pattern: Shift A: Sunday to Thursday, 7:00am - 4:00pm Shift … Tuesday to Saturday, 7:00am - 4:00pm Role Overview We are seeking an experienced Incident Management Analyst to join a complex enterprise environment within the Financial Services sector. The successful candidate will be responsible for the end-to-end management of enterprise incidents, with a particular focus on major ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

Technical Incident Commander Department: 61-458 - Technology - Live Operations Employment Type: Permanent - Full Time Location: UK - Leeds Reporting To: Adam De Silva Description Why Join DAZN? DAZN is one of the world’s leading sports streaming platforms, delivering live and on-demand content to millions of fans across … globe. In an always-on environment, service continuity is critical. As a Technical Incident Manager, you’ll be at the forefront of restoring services when issues arise, owning the process of critical incident response across our global tech infrastructure. This is your opportunity to directly influence ...

platform security and intelligent automation. You will operate the AI security control plane, harden agentic systems across their lifecycle, and establish monitoring and response that makes agent behavior observable, safe and auditable. You will be empowered to take ownership from day one—designing secure patterns, building production-grade automations … decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats and control failures; lead or support triage, containment, eradication, recovery and post-incident improvement ...

Risk and Control Assessment: Identify security risks, vulnerabilities, control gaps and emerging threats within assigned workstreams, supporting proportionate remediation, escalation and risk treatment activity. Incident Response: Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder updates, reporting and escalation. Compliance … activity, proposing recommendations where necessary. Workstream and Control Support: Support Information Security activity where it relates to assigned workstreams, user and data security controls, incident response, control operation, evidence, reporting, policy compliance, remediation or escalation. Threat Awareness and Continuous Improvement: Maintain awareness of emerging cyber security threats, technology ...

readiness, and ongoing compliance monitoring. Assist with the identification, assessment, and documentation of security risks. Track remediation actions and follow up with control owners. Incident Response & Problem Support Support security incident response activities, including investigation and evidence gathering. Assist with root cause analysis and documentation … Experience Experience in an information security, IT risk, or IT operations role. Understanding of common cybersecurity risks, threats, and control types. Familiarity with incident management, risk assessment, and assurance activities. Ability to analyse information, identify issues, and document findings clearly. Strong written and verbal communication skills. Ability to manage ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access ...

Authentication, develop Conditional Access and Privileged Access Management controls, and support secure user lifecycle and access management. Develop, implement, and maintain the Club's Incident Response Plan, support Business Continuity and Disaster Recovery planning, participate in testing and exercising cyber response procedures, and investigate and respond … including VLANs, firewalls, IDS/IPS, and segmentation. Experience using vulnerability management tools such as Nessus, Qualys, or similar. Experience developing or contributing to incident response processes. Experience conducting technical security assessments and risk reviews. Preferred Skills Experience within sport, entertainment, stadium, or public venue environments. Experience implementing ...

# NMC Cyber Incident Responder (Digital Forensics)*Police Digital Service***Wigan, England**Hybrid · Senior · Full-time### The RoleWorking within a National Management Centre Cyber Incident Response team, the role involves leading investigations into ransomware, malware, unauthorised access and insider threat incidents affecting UK policing. … analysis of endpoints, servers and cloud environments, producing defensible findings for operational and legal audiences, and briefing Chief Officers and senior IT leaders throughout incident lifecycles.### Skills & ExperienceCandidates should have hands-on experience in enterprise digital forensic investigations, endpoint and memory forensics, and log analysis using EDR telemetry ...

ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft … senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft ...

# Major Incident Manager LeadManchesterApply for this job* Permanent* Experienced Professionals* Cloud Infrastructure Management* ID 493235-en\\_GB## **About the job you’re considering**An exciting opportunity to join Capgemini as a Major Incident Manager Lead, supporting a diverse portfolio of high-profile clients.In this role, you will … lead and oversee the end-to-end major incident management process, ensuring swift resolution and minimal business impact. You will be a confident decision-maker and analytical problem solver, thriving in high-pressure environments. As the primary point of contact during major incidents, you will coordinate cross-functional teams ...

operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities Act as the escalation point for all security … incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows ...