26 to 50 of 78 Incident Response Jobs in the North of England

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

Golden Path" templates and adoption Operational Oversight & Risk Management Oversee reliability, performance, and security of platforms and pipelines Lead vulnerability management and remediation Support incident response and post-incident reviews Integrate telemetry across Azure ecosystem (Defender, Entra, WAF) Collaboration Across Technology Act as a senior advisor ...

many of these technologies/areas as possible is highly desirable: Security Frameworks (NIST, CIS etc.) PAM Tools and Technologies AWS Security Incident Response Endpoint Security (including mobile devices, Windows and Linux) Job Benefits We have a high-performance culture which is balanced evenly with world-class well ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

responding to incidents, but continuously improving through engineering excellence, threat intelligence, and data-driven decision-making. It combines real-time defense (e.g., monitoring, detection, incident response) with long-term capability building (e.g., tooling, automation, detection engineering, and platform integration) leaning into the opportunity of Agentic AI for faster … Operations and Engineering partners closely with Security Architecture, Threat Intelligence, Engagement and Engineering teams to ensure that controls are operationalized, detections are meaningful, and response processes are efficient and repeatable. A key focus is reducing mean time to detect and respond (MTTD/MTTR), increasing visibility across the environment ...

growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

through to a fix. You'll act as the technical authority for the operational team: taking ownership of complex incident resolution and root cause analysis, leading platform engineering and hardware lifecycle work, and mentoring Infrastructure Engineers as they develop their own skills. You're expected to be comfortable making … high-stakes calls under pressure during major incidents, and to drive resolution when nobody else can. Day to day, that means leading the technical response to P1 and P2 major incidents, managing Dell VxRail and VMware VCF platform lifecycle operations, overseeing Veeam backup architecture and Azure DR strategy ...

experience in cloud security, automation and security operations . Working within a collaborative cyber team, you'll help secure cloud environments, enhance detection and response capabilities, and drive automation across security processes. We're particularly interested in individuals who enjoy solving problems through automation, have experience integrating tools … security solutions, this role offers the opportunity to make a real impact. Key Responsibilities Design and implement security automation workflows to improve efficiency and response times. Develop scripts and integrations using Python, PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud, and SOC teams … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

Experience in developing and executing assurance testing approaches for cloud environments in areas such as data security (including cryptography), security configuration, network security, cyber incident response, vulnerability management, cyber threat management, information risk management, data leakage protection, identity & access management, and cyber resilience. Knowledge of IT architecture ...

vulnerability management, and compliance controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

implementing security controls, conducting threat modelling and architecture reviews, and defining secure configurations and standards. The role also ensures systems include robust monitoring, detection, incident response, and recovery capabilities, while supporting overall resilience. Additionally, as the Cyber Security Lead you will contribute to Change Advisory Board decisions, assessing ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...

performance analysis, and automate improvements where possible. Ensure high availability and data integrity through proactive alerting, backups, and robust disaster recovery planning. Own major incident response, troubleshooting and root-cause analysis, implementing long-term fixes. Maintain security best practice across cloud and on-premise environments, including vulnerability management ...

automation frameworks, and database‐as‐code practices using Redgate Flyway. Take ownership of critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate closely with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure‐by‐design, compliance ...

code, automation frameworks, and database-as-code practices using Redgate Flyway. Own critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure-by-design, compliance-by-design ...

improving, and troubleshooting the reconciliation pipeline across environments Manage and optimise core managed services: EKS, MSK, and RDS, including scaling, patching, cost governance, and incident response Maintain and extend infrastructure‐as‐code using Terraform, ensuring consistency, modularity, and alignment with AWS best practices Support and improve GitHub Actions … ability to support and troubleshoot Java/Kotlin and/or Python services running in containers Strong operational mindset, comfortable with on‐call responsibilities, incident management, and root cause analysis What we’ll offer you: We trust people to do their best work. That means flexibility over rigid rules ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security … initiatives and stay ahead of emerging threats, including AI and automated attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools ...

Cyber Security teams. Drive the delivery of high-quality ICT services across 1st, 2nd and 3rd line support. Embed ITIL best practice across Incident, Problem, Change and Continual Service Improvement. Manage cloud infrastructure, cyber security platforms and operational technology services. Lead and mentor technical managers and develop high-performing … Service Desk, Infrastructure, Cloud and Security teams. Strong experience managing Microsoft Azure cloud environments and enterprise infrastructure. Excellentoperationalcyber security knowledge including: Security monitoring Incident response Vulnerability management Endpoint protection Experience managing enterprise networking, end user computing and modern workplace technologies. Strong supplier and contract management experience. Experience delivering ...

defined procedures and governance requirements. Perform HSM configuration, installation, administration, and support activities. Manage certificate lifecycles, PKI services, and SSH key management processes. Support incident, problem, and change management activities, including root cause analysis and service restoration. Maintain accurate documentation, operational procedures, audit records, and configuration inventories. Ensure adherence … applications, databases, platforms, and distributed systems. Experience with Python or scripting for operational automation. Understanding of ITIL processes and service management disciplines. Experience with incident response, problem management, and change/release management. Familiarity with SharePoint, Confluence, and JIRA. Unix and Windows operating system knowledge. Relevant security certifications ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...