4 of 4 Contract Incident Response Jobs in the North West

firm's technology environment which includes Microsoft Defender & Sentinel. Key Responsibilities: * Monitor security event identification via the third-party security operations service. * Coordinate incident response activities including containment, evidence collection, documentation, and recovery support. * Contribute to threat hunting activities using KQL queries and intelligence-led techniques. * Support … maintain and tune Microsoft Defender, Sentinel, and Purview policies, analytics rules, alerts, and workflows. * Support the development, testing, and maintenance of automated playbooks and response actions (e.g., Logic Apps). * Verifying compliance with expected practice in the operation of technology services, including security baseline and access right reviews. * Support ...

systematic approach to diagnosing complex technical issues Strong analytical skills to interpret data, identify patterns, and draw actionable conclusions Be involved in investigating incident response activities and postmortem analyses using Dynatrace, Grafana or provide insights. Has the ability to troubleshoot and resolve data quality issues on time, ensuring … using Cloud solutions such as Azure & AWS and containerized environments (Kubernetes, OpenShift) to implement cloud-native monitoring Have good knowledge of ITSM/incident management tools integration. Interacts with and influences colleagues and has working level contact with customers Applies methodical approach to issue definition and resolution Demonstrates effective ...

position will play a key role in driving strategic cyber initiatives, enhancing operational models, and delivering transformation programmes that improve cyber resilience, threat detection, incident response, and risk intelligence capabilities. The role sits at the convergence of technology, operational process, and stakeholder engagement. You will work closely with ...

clear, evidence-based view of the current network landscape, topology, dependencies and constraints. Assess feasible segmentation approaches that support cyber resilience, operational continuity and incident response including reducing blast radius, protecting Tier 1 and Tier 2 services, and partial/full lockdown scenarios. Define differentiated treatment for higher ...