13 of 13 Contract Incident Response Jobs in the North of England

that identify sophisticated attacker behaviors across the enterprise. The role translates cyber threat intelligence, threat modelling outputs, red team findings, threat hunting insights and incident learnings into high-fidelity detection logic capable of identifying malicious activity while minimising false positives. The individual owns the end-to-end life cycle … detection content aligned to MITRE ATT&CK and organisational threat models. 2. Translate threat intelligence, threat hunting findings, red/purple team outcomes and incident lessons learned into effective detections. 3. Develop behavioural, risk-based and correlated detections across endpoint, identity, cloud, network, email and application telemetry. 4. Continuously ...

Incident Management Analyst Contract: 12 months Location: Chester Working Pattern Training Phase - First 2 Months Monday to Friday 7:00am - 4:00pm UK time Operational Shift Pattern Once fully operational, the role will operate on a rotating shift pattern: Shift A: Sunday to Thursday, 7:00am - 4:00pm Shift … Tuesday to Saturday, 7:00am - 4:00pm Role Overview We are seeking an experienced Incident Management Analyst to join a complex enterprise environment within the Financial Services sector. The successful candidate will be responsible for the end-to-end management of enterprise incidents, with a particular focus on major ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

/Network Security experience with good knowledge of SIEM, SOAR, and EDR technologies, SOAR automation (playbooks, integrations, workflows), Rapid7 tools (InsightIDR, InsightConnect, or similar), Incident response & detection, engineering, Active Directory & Windows security detections, Cloud security (AWS, GCP, or OCI), DLP monitoring and alerting, Vulnerability management & exposure scanning, Security … Analyst SOC (Security Operations) Security incidents Build & Deployment SIEM, SOAR, and EDR technologies SOAR automation (playbooks, integrations, workflows) Rapid7 tools (InsightIDR, InsightConnect, or similar) Incident response & detection engineering Active Directory & Windows security detections Cloud security (AWS, GCP, or OCI) DLP monitoring and alerting Vulnerability management & exposure scanning Security ...

ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft … senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft ...

operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities Act as the escalation point for all security … incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...

Security Incident Management Analyst (x3) Onsite in Inverness or Preston £450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi … security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

leadership across cybersecurity transformation programmes. Essential Experience Cyber Security Architecture Strong cybersecurity background in one or more of: Identity & Access Management (IAM) Security Operations & Incident Response Threat & Vulnerability Management Cloud Security Infrastructure Security Network Security Application Security Data Security Cryptography Experience working on large-scale IT and cyber … Solution Architecture. Ability to communicate complex security concepts to both technical and non-technical stakeholders. Knowledge of security governance, risk management, threats, vulnerabilities, and incident response. Identity & Access Management 3+ years' experience with HashiCorp Vault (preferably on-prem). 3+ years' experience using Terraform, including development of complex reusable ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...