26 to 50 of 152 Incident Response Jobs in the North of England

large-scale security capabilities that protect the UK’s largest digital bank.You’ll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high-performing team, you’ll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat-led approach to defence, and help shape a world-class security operation that enables the Group to go faster, safely.Why Join us If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing ...

keep the platform reliable, observable, governed and ready for controlled production use. Its emphasis is on platform health, support processes, quality assurance, release readiness, incident response and continual service improvement. The successful candidate will work closely with Architecture, Information Security, Service Delivery, Infrastructure, suppliers and consuming business teams … Manage incidents, problems, and service requests in line with established ITSM processes. Investigate and resolve operational issues, ensuring timely restoration of service. Support major incident response activities where platform services are impacted. Contribute to root cause analysis and implement actions to improve platform stability and reduce issue recurrence. ...

real control rather than a manifest scan, build-pipeline isolation, third-party risk as runtime telemetry. When the next big supply-chain incident lands, we should know within hours whether it touches us. Detect, respond, contain Runtime detection that catches what actually happens, not what a vendor template guesses … might. Incident response codified as automation: containment, rotation, isolation, evidence capture. Forensics tooling that works on our stack. Adversary emulation against our real attack surface. The metric is mean-time-tocontain, not control coverage. Secure the agentic development surface Our engineers ship with AI agents in the loop ...

keep the platform reliable, observable, governed and ready for controlled production use. Its emphasis is on platform health, support processes, quality assurance, release readiness, incident response and continual service improvement. The successful candidate will work closely with Architecture, Information Security, Service Delivery, Infrastructure, suppliers and consuming business teams … Manage incidents, problems, and service requests in line with established ITSM processes. Investigate and resolve operational issues, ensuring timely restoration of service. Support major incident response activities where platform services are impacted. Contribute to root cause analysis and implement actions to improve platform stability and reduce issue recurrence. ...

/Cyber Assessment Framework and its application to organisational security. Understanding of NIS2 , GDPR and the Data Protection Act. Experience developing and testing incident response and business continuity plans . Strong understanding of cyber security risk, governance, controls and remediation. Excellent stakeholder management and communication skills. Ability … managing cyber and information security activities. Work collaboratively with internal teams and external partners to deliver security initiatives and improvements. Develop, review and rehearse incident response plans , ensuring the organisation is prepared to detect, investigate and respond effectively to cyber incidents and data breaches. Work with relevant teams ...

fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid The opportunity SIEM … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with the Endpoint ...

DFIR Lead Cyber Operations Analyst , a VP-level role at the centre of the bank’s cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This … support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with ...

compliance Collaborate with developers to improve CI/CD pipelines, deployment strategies, and overall developer experience Enhance observability and reliability, refining alerting, monitoring, and incident response Collaborate on cloud optimization projects, improving performance, cost efficiency, and security posture Mentor and guide team members, fostering a culture of technical … compliance Collaborate with developers to improve CI/CD pipelines, deployment strategies, and overall developer experience Enhance observability and reliability, refining alerting, monitoring, and incident response Collaborate on cloud optimization projects, improving performance, cost efficiency, and security posture Mentor and guide team members, fostering a culture of technical ...

mitigate any risk. You will also be expected to maintain an awareness of the changing threat landscape and industry standards. Proactively work with Incident Response and Engineering to identify tactics and techniques used by threats actors and opportunities to improve the security of our environment. Propose and support … exercises. Ensure all relevant vulnerabilities are correctly triaged, risk assessed, logged and assigned to remediation teams. Support remediation teams with remediation strategies. Assist Incident Response team with the investigation and resolution of Security Incidents when required. Create and maintain operation procedures, configuration and technical documentation to a high ...

primary contact for the managed SOC and wider security vendors. Running vendor reviews, SLA management and service improvement activities. Overseeing BAU security operations and incident response activities. Supporting threat investigations and false positive analysis. Improving security processes, documentation and operational playbooks. Participating in an on-call rota (approximately … Microsoft Sentinel Microsoft Defender Microsoft Entra Conditional Access Azure Security controls Experience managing third-party security vendors and outsourced SOC services. Strong security operations, incident response and alert management experience. Ability to lead, influence and professionally challenge where required. ...

seeking a DFIR Lead Cyber Operations Analyst at VP level in Knutsford. In this key role, you will deliver advanced digital forensics and incident response while leading complex investigations. You will collaborate with internal teams and law enforcement, and produce clear reports under pressure. Ideal candidates will have ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

highly available cloud services. Support business stakeholders in adopting modern cloud-native architectures and security best practices. Develop and implement automation for security monitoring, incident response, remediation, and operational processes. Ensure cloud platforms comply with organisational security standards, governance requirements, and software development lifecycle practices. Identify, assess … gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions to standardise and automate cloud ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

Model & Ways of Working**: Define and implement SRE ways of working and engagement patterns, aligning reliability practices with existing ITSM/ITIL processes (e.g., incident, problem, release and change) and modern engineering delivery.* **Reliability Measures (SLIs/SLOs) & Error Budgets**: Establish service measures and targets (SLIs/SLOs … Insight:** Shape observability approaches (metrics/logs/traces) and operational monitoring models that make reliability risks visible and actionable, improving operational decision-making.* **Incident Excellence & Continuous Learning:** Design incident analysis and improvement loops, including practical approaches that strengthen incident response and drive learning through post ...

met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination – You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams … including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation – You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions ...

Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication and recovery. Developing and improving detection rules and playbooks. Producing high-quality incident documentation and reports. Supporting and mentoring Tier 1 analysts. Tier 3 SOC Analyst As a Tier 3 Analyst, you'll provide advanced technical investigation … senior escalation point for complex incidents. Responsibilities include: Leading complex and high-severity security investigations. Advanced threat hunting and incident response. Malware, endpoint, network and forensic investigation. Developing advanced detections and response capabilities. Root-cause analysis and post-incident investigation. Supporting major incident response. Working closely ...

coverage across on-site and offshore support hours. Use SQL scripting, automation, monitoring, and observability tools to improve operational resilience, service health, reliability, and incident response. To be successful in this role, we're seeking the following: Excellent SQL scripting skills. Strong scripting and automation skills using languages such … Proven skills and track record in AI automation, including the use of intelligent automation capabilities to reduce manual effort, improve operational efficiency, and enhance incident response workflows. Experience applying AI and automation solutions for alert correlation, anomaly detection, predictive monitoring, and service optimisation. Strong understanding of Site Reliability ...

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

automation tooling, scripts, and internal platform tooling.Support self-service capabilities for application and product teams.Operational Support (BAU)Support day-to-day platform operations and incident response.Apply patches, upgrades, and maintenance to platform components.Assist with onboarding new cloud environments and subscriptions/accounts.Documentation & CollaborationMaintain engineering documentation, runbooks, and platform patterns.Collaborate ...

scripts, and internal platform tooling. Support self-service capabilities for application and product teams. Operational Support (BAU)Support day-to-day platform operations and incident response. Apply patches, upgrades, and maintenance to platform components. Assist with onboarding new cloud environments and subscriptions/accounts. Documentation & CollaborationMaintain engineering documentation, runbooks ...

Engineer Role Overview We are looking for a Senior Cloud Network SRE/Cloud Platform Engineer with strong expertise in GCP/AWS networking, incident management, Kubernetes, and platform reliability engineering . The ideal candidate should be capable of troubleshooting complex cloud networking issues, leading production incident resolution … Peer-to-Peer communication . Support and manage Kubernetes platforms (GKE/EKS) . Build and maintain monitoring, alerting, and observability solutions. Perform incident response, problem management, and Root Cause Analysis (RCA). Automate operational tasks using Python and Shell scripting . Manage Infrastructure as Code (Terraform ...

Head of Information Security & Continuity, the role plays a key part in embedding a strong security culture, managing security risk, and ensuring effective response to cyber incidents. The Information Security Manager works closely with Technology, Risk, Compliance, and business teams to ensure that security controls are proportionate, effective … track remediation of vulnerabilities and audit findings Monitor the threat landscape and coordinate responses to emerging risks and vulnerabilities Lead the investigation and response to information security incidents, ensuring lessons learned and improvements are implemented Support internal and external audits, including ISO 27001 certification and surveillance activities Manage third ...