1 to 25 of 39 Incident Response Jobs in the West Midlands

Select how often (in days) to receive an alert: Create Alert Senior Security Consultant (Incident Response) Job ID:44293 Location:UK : Home Based Position Category:Consulting Position Type:Employee Regular Senior Security Consultant Role Purpose: This is a new, exciting opportunity for a Senior Security Consultant to join … LRQA’s existing dynamic Cyber Incident Response Team. This role follows a hybrid working arrangement and will involve working on client sites and from the office from time to time. We support remote work across the UK; however, the main office is in Birmingham. Applicants are required ...

safely and providing highly reliable quality of supply for our customers. At the heart of achieving these outcomes is the effective monitoring, detection and response to cyber threats across our Operational Technology (OT) estate.The role acts as the OT subject matter expert for monitoring and alerting activities, providing operational … strengthen cyber resilience across the electricity transmission network.The role will also support the development of OT monitoring strategy, detection engineering, security roadmaps and incident response readiness, ensuring monitoring solutions and longer-term capability plans remain effective against evolving threats while supporting the safe and reliable operation of critical ...

Cyber Incident Response Specialist 6-Month Contract - Inside IR35 - Hybrid (Warwick 1 day per week) Our client, a leading energy company is looking for an experienced Cyber Incident Response Specialist to take ownership of cyber security incidents from escalation through to resolution. Working within a dedicated … Incident Response team, you will coordinate containment, remediation and recovery activities, lead incident calls, engage key stakeholders, and ensure incidents are managed effectively through to closure. Key Requirements Experience managing cyber/security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider ...

Cyber Incident Response Specialist 6-Month Contract - Inside IR35 - Hybrid (Warwick 1 day per week) Our client, a leading energy company is looking for an experienced Cyber Incident Response Specialist to take ownership of cyber security incidents from escalation through to resolution. Working within a dedicated … Incident Response team, you will coordinate containment, remediation and recovery activities, lead incident calls, engage key stakeholders, and ensure incidents are managed effectively through to closure. Key Requirements Experience managing cyber/security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider ...

LRQA is seeking a Senior Security Consultant (Incident Response) to join its cyber incident response team. The role involves coordinating response to cyber incidents, on-call rotation, and occasional client-site work within the UK. The post requires UK residency and a strong incident response background with CREST/GCFA-type certifications. The candidate will lead responders, conduct investigations, and design training engagements, staying updated on CTI developments and Mitre ATT&CK-aligned #J-18808-Ljbffr ...

Employee RegularSenior Security Consultant Role Purpose:This is a new, exciting opportunity for a Senior Security Consultant to join LRQA’s existing dynamic Cyber Incident Response Team.This role follows a hybrid working arrangement and will involve working on client sites and from the office from time to time. … improving the team’s capability, in line with managerial direction. The role will lead a team of responders, as well as conduct solo incident investigations, where the actor operates with a high level of sophistication (Organised Crime or above) using agreed mitigation, preparedness, and response and recovery approaches ...

critical infrastructure. This is a hands-on role , focused on alert triage, initial investigations, and working closely with an outsourced SOC to ensure effective incident response and escalation. What you'll be doing: Monitoring and triaging security alerts in a live SOC environment Conducting initial investigations and validating … potential threats Escalating incidents in line with defined processes and playbooks Working closely with internal teams and external SOC providers Supporting incident response and contributing to continuous improvement of security operations What they're looking for: Experience in a SOC or Security Operations environment Hands-on exposure ...

critical infrastructure. This is a hands-on role , focused on alert triage, initial investigations, and working closely with an outsourced SOC to ensure effective incident response and escalation. What you’ll be doing: Monitoring and triaging security alerts in a live SOC environment Conducting initial investigations and validating … potential threats Escalating incidents in line with defined processes and playbooks Working closely with internal teams and external SOC providers Supporting incident response and contributing to continuous improvement of security operations What they’re looking for: Experience in a SOC or Security Operations environment Hands-on exposure ...

Training's government-funded Cyber Security course is your shortcut to breaking into the cyber security industry. Learn the essentials - threat intelligence, security testing, incident response and legislation - in an interactive online format and earn an NCFE-accredited Level 3 Certificate in Cyber Security Practices. Course details Duration … cyber security principles and threat intelligence Identifying malicious software, vulnerabilities and social engineering tactics Applying effective security testing methods and cyber security controls Developing incident response plans for security breaches Understanding legislation, information security standards and ethical practice in cyber security Potential roles Information Security Analyst Incident ...

configured, resilient, secure, and performant. Beyond day-to-day operational responsibilities, the role carries explicit accountability for network architecture, strategic design, and cross-functional incident response. This role also attracts a market pay supplement of £6650 per annum (to be reviewed in February 2027). Main duties … routing, switching, wireless, WAN, load balancing, IPAM, DNS and DHCP services, alongside Extreme Networks Fabric Engine, Site Engine and wireless platforms. Network Security, Resilience & Incident Management Provide technical leadership for network security and operational resilience across the UKHSA estate. Administer Palo Alto NGFW, Panorama, VPN, micro-segmentation ...

best practices and implementing controls for Cloud Security and governance.Implementation of automated security tooling to validate security requirements and identify potential issues. Threat Detection & Incident ResponseDefine threat detection and incident response processes and playbooks for cloud environments.Collaborate with the SOC to operationalise detection rules and incident … .Proficiency with:Azure security services: Defender for Cloud, Entra ID, Sentinel etc.AWS security services: Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch.Working knowledge of cloud incident response processes and proceduresStrong understanding of security best practices in multi-cloud environments.Desirable Skills & ExperienceFamiliarity with Infrastructure as Code (Terraform)Knowledge of cloud ...

role will include:Serving as a subject matter expert for a team of analysts supporting 24/7/365 security monitoring and response operations.Monitoring, investigating, and responding to cybersecurity incidents, including participation in off-hours and on-call rotations.Acting as an escalation point … applying behavioural and anomaly-detection techniques.Leveraging commercial and open-source technologies, including AI-enabled tools, to automate repetitive tasks, enhance threat detection, and improve response efficiency.Identifying opportunities to automate SOC processes and improve operational efficiency.Assessing programme strengths and weaknesses and recommending AI solutions to enhance team capabilities, skills ...

ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data Ingestion … performance of the SIEM infrastructure. Security Engineering Contribute to security engineering projects, transitions, and transformations. Work closely with security operations and associated security incident response systems Stay informed about emerging threats and security best practices. Essential Skills/Experience Proven experience in SIEM Detection Engineering. Experience using cyber ...

Azure environments.You’ll work across servers, networks, storage, and security tools, contributing to infrastructure projects as well as cyber initiatives such as vulnerability management, incident response, and enhancing security controls. You’ll also collaborate with group security teams and help ensure systems remain resilient and up to date.Key … Tenable, Zscaler etc.)Palo Alto deployment/configuration experience is a mustGood understanding of firewalls, network protocols, and intrusion preventionAbility to manage vulnerability scanning, incident response, and remediationConfident communicator with solid documentation skillsThe role also covers an office in Milton Keynes and they might be occasional travel there ...

Security Practices, Level 3) equips you with the practical skills employers in Greater Manchester are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … security principles. Threat Intelligence: Develop expertise to identify risks and analyze threats. Vulnerability Testing: Conduct cyber security testing, identify vulnerabilities, and implement controls. Incident Response: Prepare for and respond to live cyber security incidents. Ethics & Law: Understand legislation and ethical conduct within the cyber security sector. Professional Skills ...

Security Practices, Level 3) equips you with the practical skills employers in Greater Manchester are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … security principles. Threat Intelligence: Develop expertise to identify risks and analyze threats. Vulnerability Testing: Conduct cyber security testing, identify vulnerabilities, and implement controls. Incident Response: Prepare for and respond to live cyber security incidents. Ethics & Law: Understand legislation and ethical conduct within the cyber security sector. Professional Skills ...

Security Practices, Level 3) equips you with the practical skills employers in Greater Manchester are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … security principles. Threat Intelligence: Develop expertise to identify risks and analyze threats. Vulnerability Testing: Conduct cyber security testing, identify vulnerabilities, and implement controls. Incident Response: Prepare for and respond to live cyber security incidents. Ethics & Law: Understand legislation and ethical conduct within the cyber security sector. Professional Skills ...

security policies, standards and control frameworks. Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders. Lead security incident preparedness, response oversight and resilience planning. Drive cyber maturity improvements across people, process and technology. Manage security risk assessments and remediation programmes. Ensure … leading enterprise-wide cyber security programmes. Strong background covering: Operational Security Security Governance Cyber Risk Management Cyber Assurance Security Strategy Third-Party Security Management Incident Response & Cyber Resilience Experience overseeing or working alongside managed SOC services. Strong stakeholder management skills with the ability to engage both technical ...

offices on a hybrid basis. Cyber Security Specialist: Duties Adequate Implementation of security controls - XDR Escalation pint for security tickets raised in ITSM and Incident Management Portals Implementation/Operation of InfoSec processes, Threat Hunting, detection, monitoring and incident response Delivery of cyber security projects, implementation …/Testing cyber security technologies Support with controls, IAM, patch management and security event monitoring Identify cyber threats, hunting and exposure Involved in InfoSec incident management process - preparation, containment, analysis and response Implementation of new cyber security tooling and threat-informed systems Cyber Security Specialist: Experience ...

offices on a hybrid basis. Cyber Security Specialist: Duties Adequate Implementation of security controls - XDR Escalation pint for security tickets raised in ITSM and Incident Management Portals Implementation/Operation of InfoSec processes, Threat Hunting, detection, monitoring and incident response Delivery of cyber security projects, implementation …/Testing cyber security technologies Support with controls, IAM, patch management and security event monitoring Identify cyber threats, hunting and exposure Involved in InfoSec incident management process - preparation, containment, analysis and response Implementation of new cyber security tooling and threat-informed systems Cyber Security Specialist: Experience ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

Improving detection rules, correlation logic and SOC playbooks Investigating recurring alerts and reducing false positives Supporting vulnerability management and remediation activity Contributing to post-incident reviews and lessons learned Producing incident, vulnerability and SOC reporting Working closely with wider infrastructure, network, architecture and development teams Sharing knowledge … years' experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with ...

pipelines and deployment automation using Azure DevOps . Monitor production services using Application Insights and Azure Monitor , diagnosing and resolving issues proactively. Participate in incident response and root-cause analysis when required. Identify technical debt and deliver targeted improvements within sprint capacity. Work closely with Product Owners … handling, and retry behaviour. Azure DevOps — CI/CD pipeline authoring, automated testing integration, and deployment management. Production operational experience — monitoring via App Insights, incident diagnosis, and root cause analysis. Excellent written communication skills — PR descriptions, PBI commentary, ADO notes, and incident updates must be unambiguous and complete. ...

commercial services. The role will cover enterprise applications, integrations, customer-facing systems, platforms and associated infrastructure, with a strong emphasis on proactive monitoring, effective incident resolution and continual service improvement. You will work across a broad technology environment, identifying potential issues before they impact users, responding to operational incidents … position involves close collaboration with teams across Engineering, Platform, Integration, Product, Cybersecurity, Enterprise IT and Service Management. You will contribute to areas including incident response, change and release activities, operational governance, platform optimisation and service continuity. Key Responsibilities Provide day-to-day operational and technical support across enterprise ...