14 of 14 Contract Incident Response Jobs in the North of England

Security Incident Response Engineer (ServiceNow) Contract: 6 Months (Likely Extension)Location: HybridIR35: Outside/LTD – £700PDSC Cleared/BPSSA highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC).This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling. Key Responsibilities ServiceNow SIR Workflow Design & Development Design and configure ...

Security Incident Response Engineer (ServiceNow) Contract: 6 months (Likely Extension) Location: Hybrid IR35: Outside/LTD - £700PD SC Cleared/BPSS A highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC). This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling. Key Responsibilities ServiceNow SIR Workflow Design & Development Design ...

Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred … Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow ...

Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred … Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow ...

Security Incident Response Engineer Location : Warrington (Hybrid - 2 days per week onsite) Contract Length : 6 months IR35 Status : Out of Scope Rate : Up to £100 per hour Umbrella/£75.30 per hour PAYE Overview Were looking for an experienced Security Incident Response Engineer to support … major organisation on a 6-month contract. This role will focus on cyber security incident response activities, security operations support, and stakeholder engagement across the business. Key Responsibilities Investigate, analyse and respond to cyber security incidents. Support and enhance security operations processes and procedures. Utilise ServiceNow SecOps ...

Working within the SOC, you will collaborate closely with Cyber Defence, Security Engineering, Threat Intelligence, and AI Governance teams to develop detection capabilities, improve incident response, and protect the organisation against emerging AI-related threats. Key Responsibilities Monitor, investigate, and respond to security events generated through enterprise … unusual prompt activity, authentication anomalies, DLP alerts, and suspicious API usage. Investigate and triage security incidents, determining severity and escalating confirmed threats through established incident response processes. Develop, tune, and optimise SIEM detection rules for AI-specific attack scenarios including: Prompt injection attempts Data exfiltration Credential misuse ...

highly available cloud services. Support business stakeholders in adopting modern cloud-native architectures and security best practices. Develop and implement automation for security monitoring, incident response, remediation, and operational processes. Ensure cloud platforms comply with organisational security standards, governance requirements, and software development lifecycle practices. Identify, assess … gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions to standardise and automate cloud ...

knowledge articles; contribute to operational readiness Support audits and control testing; evidence compliance with security and regulatory requirements. Participate in on-call/incident response, problem management, and continuous improvement. Essential Skills Knowledge of Multi-Factor Authentication/Passwordless Authentication technology is required. Strong hands-on experience with … engineering MFA/SSO within an enterprise IAM environment. Working knowledge of PKI, certificates, TLS, and key management concepts. Experience operating production services: monitoring, incident management, change/release processes. Desirable Skills Previous experience of working in financial services, ideally HSBC experience. EntraID/AzureAD experience. Scripting/automation ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

that will be based in Leeds. Our client is seeking a Security Operations Centre professional, focusing on continuous monitoring, alert triage, investigation, and initial incident response. You will operate at the front line of security operations, supporting senior analysts and contributing meaningful operational insights while helping shape processes … security alerts across multiple monitoring and detection platforms Perform triage and analysis of security events, identifying potential threats and escalating where necessary Assist in incident response activities, including containment, remediation, and recovery efforts Follow established operational procedures (runbooks) and contribute to their ongoing refinement Provide feedback to improve ...

defined procedures and governance requirements. Perform HSM configuration, installation, administration, and support activities. Manage certificate lifecycles, PKI services, and SSH key management processes. Support incident, problem, and change management activities, including root cause analysis and service restoration. Maintain accurate documentation, operational procedures, audit records, and configuration inventories. Ensure adherence … applications, databases, platforms, and distributed systems. Experience with Python or scripting for operational automation. Understanding of ITIL processes and service management disciplines. Experience with incident response, problem management, and change/release management. Familiarity with SharePoint, Confluence, and JIRA. Unix and Windows operating system knowledge. Relevant security certifications ...

manage multiple priorities effectively. Some other highly valued skills may include: Relevant security or project management experience. Background in operational environments, IT Infrastructure, incident response and change management. Strong documentation skills for operational procedures. Familiarity with SharePoint, Confluence, and JIRA. Unix/Windows operating system knowledge. All profiles ...

manage multiple priorities effectively. Some other highly valued skills may include: Relevant security or project management experience. Background in operational environments, IT Infrastructure, incident response and change management. Strong documentation skills for operational procedures. Familiarity with SharePoint, Confluence, and JIRA. Unix/Windows operating system knowledge. All profiles ...