1 to 25 of 38 Incident Response Jobs in Northern Ireland

Manager to join our Digital Trust & Cyber Security practice. Working on behalf of our clients, you will lead Security Operations Centre (SOC) analysts and incident response specialists. You will combine hands‐on operational leadership with advisory work. This means managing live incident containment … minimum of two days per week, depending on the role and assignment. What you'll do Lead and develop SOC analysts and incident response specialists, providing clear operational direction, coaching and support across day‐to‐day security operations. Take a hands‐on leadership role during cyber security incidents ...

Manager to join our Digital Trust & Cyber Security practice. Working on behalf of our clients, you will lead Security Operations Centre (SOC) analysts and incident response specialists. You will combine hands-on operational leadership with advisory work. This means managing live incident containment … minimum of two days per week, depending on the role and assignment. What you'll do Lead and develop SOC analysts and incident response specialists, providing clear operational direction, coaching and support across day-to-day security operations. Take a hands-on leadership role during cyber security incidents ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities Design, build, and operate cloud-native security controls as software products across cloud infrastructure, data platforms, and application … pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generate high-quality signals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery Apply modern ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, andoperatecloud‐nativesecurity controls as software products across cloud infrastructure, data platforms, and application services Engineer andmaintaincloud …/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generatehigh‐qualitysignals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery Apply modern ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. Perform advanced event and incident analysis, including baseline establishment and trend analysis. Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident ...

skills. They have hands-on experience with EDR, firewall management, device control, API management, and endpoint security operations, along with a solid understanding of incident response and threat detection. Comfortable administering CrowdStrike and Microsoft security platforms, they leverage scripting, API integrations, GitHub-based workflows, and emerging AI-driven … minimum of 3 years of hands on professional experience in cybersecurity, endpoint security, or security engineering.Hands-on experience administering Anti Virus/Endpoint Detection Response solutions.Experience investigating security events and supporting incident response activitiesA minimum of 1 years’ experience with PowerShell, Python, or similar scripting languages.Experience working ...

skills. They have hands on experience with EDR, firewall management, device control, API management, and endpoint security operations, along with a solid understanding of incident response and threat detection. Comfortable administering CrowdStrike and Microsoft security platforms, they leverage scripting, API integrations, GitHub-based workflows, and emerging AI-driven … years of hands on professional experience in cybersecurity, endpoint security, or security engineering. Hands-on experience administering Anti Virus/Endpoint Detection Response solutions. Experience investigating security events and supporting incident response activities A minimum of 1 years’ experience with PowerShell, Python, or similar scripting languages. Experience ...

will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Senior SOC Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks while mentoring analysts and being their escalation point. You will help provide security metrics, threat landscape updates and emerging trends. This role requires both deep analytical skills for threat detection and response, as well as technical engineering ...

skills. They have hands-on experience with EDR, firewall management, device control, API management, and endpoint security operations, along with a solid understanding of incident response and threat detection. Comfortable administering CrowdStrike and Microsoft security platforms, they leverage scripting, API integrations, GitHub-based workflows, and emerging AI-driven … years of hands on professional experience in cybersecurity, endpoint security, or security engineering. Hands-on experience administering Anti Virus/Endpoint Detection Response solutions. Experience investigating security events and supporting incident response activities A minimum of 1 years’ experience with PowerShell, Python, or similar scripting languages. Experience ...

Consulting is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within our Digital Trust & Cyber Security practice. You will manage live incidents, guide day-to-day SOC operations, and help clients modernise their security operations, improving SIEM, SOAR and EDR capabilities. You will ...

Glance Founding UK member of the security organisation at a fast-growing, next-generation cloud security platform Specialism in MDR, detection engineering, incident response, and cloud threat analysis (AWS, GCP, or Azure) Hybrid, Belfast-based ... 3 days per week in office ... must already be based … confident engaging directly with customers under pressure. Key Responsibilities Own UK-hours MDR coverage independently, taking end-to-end responsibility for monitoring, triage, and response Lead in-depth security investigations across supply chain, API, malware, and runtime attack scenarios, documenting outcomes and building playbooks Handle complex and critical incidents ...

Security Operations Centre (CSOC). You'll take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify … Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs ...

primary escalation point for production issues, work alongside engineering to resolve complex problems, and use AI tooling to remove repetitive work. DUTIES/RESPONSIBILITIES Incident and Escalation Response Serve as the escalation point for frontline support, owning complex production issues end to end from triage through resolution … client communication Participate in major incident response, providing impact analysis and actionable recommendations Monitor system performance and availability, resolving issues before they impact clients Manage production access and support configuration and change management activities Automation and AI Tooling Use AI tooling to accelerate investigation, including log analysis, data ...

associated with Thales' IS/IT networks, systems and applications, as per Customer (primarily HMG UK MOD) and Thales Group policy and mandatory requirements. Incident Response: Be responsible for the reporting, investigation and analysis of security incidents and potential breaches within classified environments, working with the Thales … Incident management team to ensure identified issues are resolved quickly. IS/IT Squad Engagement: Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing IS/IT Squad activities, initiatives ...

Working closely with IT, business functions and third-party suppliers, the Information Security Specialist will identify and manage security risks, coordinate security initiatives, support incident response activities and promote a strong culture of information security awareness across the organisation. Key Responsibilities: Information Security Governance & Compliance Support the ongoing ...

guidance of the ChiefInformation Security Officer, will drive periodic security assessments,security policy enforcement, design and implementation and operation ofsecurity controls and systems, and incident response. The essential functionsof the position include, but are not limited to the following dutiesconsistent with the Information Security Engineer position. Essential Job Functions ...

cloud platforms and services you build. Implement robust monitoring, alerting, and logging solutions, and participate in on-call rotations to ensure rapid incident response and resolution. Security & Compliance: Implement and enforce cloud security best practices, ensuring compliance with Citi's policies, industry standards, and regulatory requirements. Configure ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

Consulting is seeking a Security Operations Manager to lead SOC analysts and incident responders within our Digital Trust & Cyber Security practice. You will guide live incident containment and day-to-day SOC operations while helping clients modernise SIEM, SOAR and EDR capabilities. You’ll work across sectors, advise … tooling, develop incident playbooks, and coach teams in a hybrid, collaborative environment with a focus on client impact and security excellence. #J-18808-Ljbffr ...

engineers, with a clear path toward technical or team leadership as the U.K. presence scales. Responsibilities Assist in fine-tuning Upwind's detection and response mechanisms. Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements. Lead and conduct in-depth security investigations, including … best practices in cloud security. Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency. Requirements Based in Belfast, NI. This is a hybrid, in-office, 3 days per week role; visa sponsorship is not available. You must ...

technical partnerships across observability, analytics, security, and cloud platform ecosystems. Provide executive‐level communication, roadmap updates, and operational health reporting to senior leadership. Lead incident response efforts for critical telemetry services and ensure continuous improvement through post‐incident learning and resiliency engineering. Establish telemetry cost transparency, chargeback ...

validate low-confidence alert enrichments, threat summaries, and triage recommendations generated by AI agents.* Assign, dispatch, and track complex security investigations, policy changes, and incident response playbooks to appropriate Tier 2/3 analysts and consultants.* Serve as the operational escalation point when automated pipelines encounter exceptions, edge … template maintenance, submitting structured enhancement tickets to engineering when underlying code changes are required.**3. Quality Assurance & Performance Auditing*** Regularly audit AI-generated outputs (incident summaries, triage context, customer reports) against human analyst benchmarks to ensure high fidelity and operational safety.* Identify recurring false positives or hallucination patterns, collaborating ...

Experience Experience supporting MOD security working groups or MOD Secure by Design accreditation processes. Experience developing in‐service cyber support plans and capabilities, including: Incident response plans Vulnerability management plans Security monitoring or operational support arrangements Security maintenance and update processes Understanding of software, hardware and embedded development ...

Security Operations Manager to lead a SOC/IR team within our Digital Trust & Cyber Security practice in the UK. You will oversee live incident containment, coordinate investigations and help clients mature their security operations, SIEM, SOAR and EDR capabilities. You'll combine hands‐on leadership with advisory work … working across enterprise and public sector engagements, contributing to stronger cyber resilience while mentoring analysts and shaping incident #J-18808-Ljbffr ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...