76 to 100 of 203 Incident Response Jobs in the North of England

third-party SOC vendor. Triage, analyse and prioritise alerts, incidents, escalations, and investigations - validating severity, business impact, and regulatory implications of incidents Co-ordinate incident management and response activities aligned with defined policies, standards, and framework requirements by being the internal response facilitator and co-ordinator … operations. Skills, Qualifications, And Experience Previous hands-on experience in cybersecurity operations or security engineering roles. Experience of security monitoring, threat detection, incident response, and threat hunting methodologies. Strong working knowledge of endpoint security, identity and access management, authentication controls, privileged access management, and security hardening standards incl. ...

alerting integrations, workbooks and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. Implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber … Architecture. Work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. Support the engineering and continuous improvement of security controls for end users, Azure workloads, cloud services, identities, workloads and non-human or agent identities. Integrate security ...

compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic improvement. Support disaster recovery testing to validate recovery plans … integrating AI or agentic tooling into engineering workflows (e.g. IaC generation, automated remediation, or documentation). Exposure to compliance‐evidence or governance tooling and incident‐management tooling. Additional Information This is a hybrid role, with attendance at our Leeds office once a month. Participation in the on‐call rota ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

security or information security role Strong understanding of information security principles and risk management Hands-on experience with security monitoring and incident response Knowledge of Microsoft 365 and cloud security controls (e.g. Azure AD, Defender) Familiarity with regulatory and compliance requirements Ability to communicate technical risks clearly ...

improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation. Key Responsibilities Manage and enhance Microsoft security, compliance and data protection … access control (RBAC), access reviews and Joiner-Mover-Leaver processes. Identify security risks, vulnerabilities and control gaps, driving remediation activity where required. Support security incident investigations, coordination, reporting and escalation. Assist with audits, compliance activities and the maintenance of security control evidence. Produce meaningful security reporting and insights ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation, AI and modern technology ...

rotations, certificate renewals and infrastructure upgrades Contribute to the management and resolution of complex L2/L3 incidents Conduct root cause analysis and post-incident investigations Maintain and update runbooks and operational documentation Participate in an on-call rota, including out-of-hours incident response Mentor … infrastructure-as-code technologies such as Terraform Solid understanding of ITIL practices Experience supporting and operating production systems within an on-call environment, including incident triage, technical investigation, remediation and post-incident review. Experience implementing and deploying production changes in business-critical environments. Strong troubleshooting and root-cause ...

Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk assessments and support audit and compliance activities. Drive improvements in data security, governance, and cyber … with ISO27001 principles and broader governance or quality frameworks such as ISO9001. Experience with backup, disaster recovery, and business continuity planning. Strong troubleshooting and incident management capability. Experience managing third‐party suppliers and service providers. Excellent communication, stakeholder management, and relationship‐building skills. Ambition and capability to progress toward ...

monitor systems, identify and remediate vulnerabilities, and respond effectively to security incidents. The role requires practical knowledge of SIEM, vulnerability management, threat detection and response, together with strong investigation and troubleshooting skills.The role will analyse cyber threats, support forensic investigation where required, and contribute to security operations, incident response, monitoring and operational reporting across the cyber security function.What you will be doingAs a trusted part of the IT team you will be responsible for:Security OperationsMonitor and review security alerts and incidents, ensuring they are investigated, recorded, prioritised and escalated appropriately.Investigate cyber security incidents and support ...

code. Build CI/CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices and reviews that turn production issues into lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection … Experience with Terraform or comparable infrastructure-as-code tools. Knowledge of Docker, Kubernetes and CI/CD tooling. A solid understanding of observability and incident management. Strong cloud security knowledge and an understanding of operating within a regulated environment. An automation-first approach and confidence taking ownership ...

role where you'll be pigeonholed into one area of cyber security. You'll get exposure to vulnerability management, customer security reporting, governance, compliance, incident response, bid support and security operations, giving you a broad foundation to build an exciting career. Working from our Manchester office (three days … years' experience in cyber security or IT, along with a good understanding of topics such as vulnerability management, security risk, secure configuration and incident response. Just as importantly, you’ll be organised, collaborative and comfortable explaining technical concepts in a way that makes sense to different audiences. ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical ...

technical role (e.g. TAM, Security Consultant) Experience engaging senior stakeholders (CISO, Head of IT/Security) Strong understanding of SOC operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability ...

initiatives. Assist with vulnerability management and remediation activities. Help clients improve their Microsoft Secure Score and overall security posture. Participate in infrastructure and security incident response activities. Administer and support Keeper Security password management environments. Promote best practice around privileged access management, password security and identity protection. Support ...

including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical ...

security controls. Improve security across endpoints, identities, applications, cloud services, and infrastructure. Support vulnerability identification, prioritisation, and remediation. Monitor security alerts and support incident investigation and response. Work with IT teams to resolve vulnerabilities, security weaknesses, and configuration issues. Maintain effective security controls and support Cyber Essentials, Cyber Essentials … Microsoft Defender technologies, including Defender for Endpoint and Microsoft 365 Defender. Experience supporting vulnerability management and remediation activities. Knowledge of security monitoring, alert triage, incident response, and technical investigation. Experience configuring or supporting security controls across cloud, endpoint, and identity platforms. Strong analytical and problem-solving skills with ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise problems. Monitoring and gathering … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise these via the appropriate … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

practices. Monitor security risks and implement appropriate controls. Manage user access, permissions and identity management. Ensure compliance with relevant legislation and organisational policies. Coordinate incident response and recovery. Service Delivery Ensure timely and effective resolution of IT issues. Monitor service desk performance and user satisfaction. Escalate and manage … self-confident. Microsoft certifications. Experience with ERP or line-of-business systems Pipedrive, Sage, RAPS and Procore). Key Performance Indicators (KPIs) Service desk response and resolution times. Cyber security compliance. Successful delivery of IT projects. Budget adherence. Team performance and development. Reduction in recurring IT incidents. Authority ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) Networking & Edge ...

controls. Help establish governance and assurance from POC through to production. Address data access, permissions, IAM, DLP and non-human identity risks. Develop AI incident response and assurance approaches. Assess AI models, vendors and third-party risks. Lead client workshops and contribute to proposals and pre-sales. Develop ...

architecture teams to improve platform capabilities and developer workflows. Mentor engineers and contribute to platform engineering best practices, governance, and technical strategy. Lead incident response, reliability improvements, root cause analysis, and operational maturity initiatives. Improve platform security, scalability, resiliency, and deployment efficiency across AWS, Azure, and GCP environments. ...

focus on performance, scalability, and cost efficiency. Take part in on-call rotations and own the operational health of high-availability production services, including incident response and post-incident improvements. Lead design reviews and code reviews, raising the quality bar across the team and mentoring mid-level ...