51 to 75 of 152 Incident Response Jobs in the North of England

many of these technologies/areas as possible is highly desirable: Security Frameworks (NIST, CIS etc.) PAM Tools and Technologies AWS Security Incident Response Endpoint Security (including mobile devices, Windows and Linux) Job Benefits We have a high-performance culture which is balanced evenly with world-class well ...

effort, improve consistency and strengthen service resilience.Partner with engineering, platform and product teams to deliver and continuously improve cloud solutions and security data platforms.Lead incident response, problem investigations and root cause analysis activities, ensuring learning is converted into measurable improvements.Develop and enhance observability, monitoring and alerting capabilities that ...

effort, improve consistency and strengthen service resilience.Partner with engineering, platform and product teams to deliver and continuously improve cloud solutions and security data platforms.Lead incident response, problem investigations and root cause analysis activities, ensuring learning is converted into measurable improvements.Develop and enhance observability, monitoring and alerting capabilities that ...

C#, Angular, SQL Server Stay hands-on when needed: design, code, pair, review PRs, unblock the team Drive quality, reliability and security: testing approach, incident response, post-incident improvements Hire, onboard and develop engineers (including onshore/offshore collaboration) What we need from you 8+ years building ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

frameworks and standards (e.g. ISO 27001, NIST Cyber Security Framework) Experience in conducting risk assessments and implementing effective security controls Hands-on experience in incident response, investigation, and resolution Experience supporting internal and external audits and compliance activities Experience managing third-party security risk or supplier assurance processes ...

Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … edge technology and a strong set of processes. The NMC Cyber Detect Analysts will work closely with teams across the NMC, typically with the Incident Response Teams to ensure security issues are addressed quickly upon discovery. NMC Cyber Detect Analyst duties involve but are not limited to: Initial ...

interpret monitoring data, identify patterns and translate operational insight into meaningful improvement activity. Ability to make sound decisions under pressure and support effective incident response. Strong commitment to service reliability, operational resilience and excellent customer service. Commercial acumen, including an understanding of IT service costs, cloud consumption … standards. Experience of working in a global environment across international locations with an appreciation of multiple cultures. Knowledge Practical knowledge of SRE principles, observability, incident response, problem management and operational resilience. Detailed practical knowledge of Microsoft Azure infrastructure and platform services, including monitoring, diagnostics, RBAC, networking and automation. ...

Group Policy environments in line with recognised security standards. Apply CIS Benchmarks, STIGs and other system-hardening standards. Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security. Contribute to vulnerability management, root-cause analysis and remediation activity. Support security controls across VMware Cloud … Benchmarks or similar hardening standards. Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture. Experience with vulnerability management, SIEM, logging and incident response. Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity. Experience with Elastic Stack or Elastic Security would be highly advantageous. Exposure ...

best practices, including IAM design, logging/monitoring, network security controls and workload security. Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience. Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments ...

including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where you’ll work closely with infrastructure, cloud … threats.Key ResponsibilitiesMonitor and respond to security alerts across SIEM and EDR platformsManage and tune security tools including firewalls, WAFs, and endpoint protectionInvestigate and support response to security incidentsPerform vulnerability assessments and remediation trackingSupport implementation of security controls across cloud and on-prem environmentsContribute to security policies, standards, and proceduresAssist ...

laptops, mobile) are configured securely.Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them.Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats.Identity & Access: Manage the lifecycle ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) Networking & Edge ...

engagements across the full stack — from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/CD pipelines, secure landing zones and cloud posture reviews. Expertise when integrating third ...

Familiarity with data analysis, data visualisation or working with large and complex datasets. Exposure to cyber security concepts such as security operations, threat detection, incident response, risk management or vulnerability management. Experience using automation to improve processes, increase efficiency or solve technical problems. Familiarity with Linux, cloud platforms ...

opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group as a trusted technical ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

design, architecture and delivery of advanced security automation solutions across enterprise environments. As the technical authority for SOAR engineering, you will work closely with Incident Response, Security Operations and Engineering teams to define automation strategy, develop scalable playbooks and drive continuous improvements in cyber defence capabilities. This … design and architecture of enterprise-scale SOAR solutions using the Splunk platform. Define automation strategy and identify opportunities to improve detection, investigation and response capabilities. Design, develop and optimise advanced SOAR playbooks and automated workflows. Act as the technical authority for security automation, orchestration and analytics. Produce system analytics ...

vulnerability assessments and coordinate remediation efforts. Deliver threat modelling workshops and support secure solution design activities. Deliver security awareness training and workshops. Assist with incident response planning and post-incident reviews. Collaborate with technical and non-technical stakeholders to embed security into business processes. Required Skills & Experience ...

Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective … liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...