19 of 19 Contract Incident Response Jobs in the North of England

IR35 Status: Outside IR35 Contract Length: 6 months initially Location: Hybrid - Liverpool Overview I'm supporting an organisation seeking an experienced Incident Response Manager to lead and mature its Incident Response capability across a complex enterprise environment. Responsibilities Own and manage cyber incidents from detection through … resolution. Review, enhance, and develop Incident Response frameworks, runbooks, and playbooks. Ensure alerts from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. Drive continual improvement ...

specialist that provides support to the clients across EMEA, APAC, US and Canada. We have an excellent job opportunity for you. Role Title: Security Incident Management Analyst- Active SC or SC Eligible Location: Inverness or Preston | 5 days onsite Duration: 31/03/2027 Pay Rate … inc. (PAYE through Umbrella) Role Description: About the role you're considering The Security Incident Management Analyst operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers. The role assists in ensuring security ...

Role Title: Security Incident Management Analyst (x3 seats) Location: Inverness or Preston | 5 days onsite Duration: 31/03/2027 MUST BE PAYE THROUGH UMBRELLA Role Description: About the role you're considering The Security Incident Management Analyst operates within the Operational Integrator (OI) function … multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers. The role assists in ensuring security incidents are identified, tracked, escalated, and reported in accordance with client policies and agreed service levels. Working closely with suppliers, service management teams, and security stakeholders ...

Blends hands-on incident command and digital forensics with programmatic capability building. Establishes the CSIRT operating model, creates scenario playbooks (ransomware, exfiltration) from scratch, and leads technical containment/recovery during active security events. About the Role My client is a well established business, looking for a hands … CSIRT Lead to establish and run the cyber incident response capability across a complex, multi-site industrial and corporate estate. The role blends hands-on incident command and digital forensics coordination with the programmatic build-out of incident playbooks and operational runbooks from scratch. Key Responsibilities ...

IR35 Status: Outside IR35 Contract Length: 6 months initially Location: Hybrid - Liverpool Overview I'm supporting an organisation seeking an experienced Incident Response Manager to lead and mature its Incident Response capability across a complex enterprise environment click apply for full job details ...

Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with troubleshooting expertise. Communication & Documentation ...

Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with troubleshooting expertise. Communication & Documentation ...

point for complex issues impacting business-critical services. Execute technical recovery actions during incidents to restore service as quickly as possible. Participate in Major Incident and High-Priority Incident response activities. Technical Troubleshooting Diagnose and resolve application, infrastructure, integration, database, and data-related issues across supported products … architecture, business processes, and operational dependencies. Problem Management & Continuous Improvement Conduct root cause analysis (RCA) and contribute to Problem Management processes. Participate in post-incident reviews and recommend long-term preventative solutions. Drive continuous service improvement through automation, process optimisation, tooling enhancements, and reduction of recurring incidents. Monitor service ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

highly available cloud services. Support business stakeholders in adopting modern cloud-native architectures and security best practices. Develop and implement automation for security monitoring, incident response, remediation, and operational processes. Ensure cloud platforms comply with organisational security standards, governance requirements, and software development lifecycle practices. Identify, assess … gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions to standardise and automate cloud ...

workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong commercial experience with AWS, Azure … understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

Engineer Role Overview We are looking for a Senior Cloud Network SRE/Cloud Platform Engineer with strong expertise in GCP/AWS networking, incident management, Kubernetes, and platform reliability engineering . The ideal candidate should be capable of troubleshooting complex cloud networking issues, leading production incident resolution … Peer-to-Peer communication . Support and manage Kubernetes platforms (GKE/EKS) . Build and maintain monitoring, alerting, and observability solutions. Perform incident response, problem management, and Root Cause Analysis (RCA). Automate operational tasks using Python and Shell scripting . Manage Infrastructure as Code (Terraform ...

Work closely with development teams to support application deployments Improve automation, monitoring and operational efficiency Optimise cloud performance and spend across multiple environments Support incident response, troubleshooting and root cause analysis Implement networking, security and disaster recovery best practices Produce clear technical documentation and infrastructure standards ...

secure configuration and operation of Microsoft Azure and Microsoft 365. Implement and maintain Microsoft Defender security controls. Support security monitoring, threat investigation and incident response activities. Support vulnerability management, including identifying, prioritising and remediating security weaknesses. Support Power Platform governance, including Data Loss Prevention (DLP) policies, environment management … Experience implementing or supporting Conditional Access and access governance. Knowledge of RBAC and privileged access management. Experience investigating security alerts and supporting cyber security incident response. Good understanding of Azure security fundamentals and Microsoft security best practices. Experience supporting Microsoft 365 security and cloud-based services. Experience producing technical ...

security principles and secure-by-default engineering - Experience with systems design and integration in complex environments - Comfortable supporting services in production - on-call participation, incident response, observability - User-focused mindset and experience collaborating with designers and product colleagues - Experience working in agile or hybrid delivery models (Scrum, Kanban ...

alarms, lockdown/alerting functions. - Security management and integration platforms: PSIM, VMS, access control management, event correlation. - Alarm monitoring integration: SOC/ARC interfaces, incident response workflows. - Power and resilience: UPS, battery autonomy, dual feeds, segregation, surge protection, earthing/bonding. - Networked security infrastructure: structured cabling, fibre … maintenance, audit trails). 5) Testing, commissioning and handover - Define test strategies: FAT/SAT, integrated testing, performance validation, resilience/failover tests, alarm response verification. - Support commissioning, resolve defects, verify as-built compliance, and produce handover documentation and training inputs. - Ensure operational readiness: SOPs input, maintenance regimes, spares ...

Implement cloud security controls for GCP resources and Kubernetes platforms. Support identity governance, privileged access and least privilege implementation. Collaborate with Security Operations and Incident Response teams during security events. Support security assurance for third-party integrations and supplier solutions. Essential Skills : Information Security Engineering Identity and Access ...

identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. - Drive intelligence-led decision-making across the organisation. Act as a subject matter expert for threat intelligence tools ...

keep organisations secure Threat intelligence: how to spot risks before they become problems Security testing: finding vulnerabilities and putting the right controls in place Incident response: what to do when something goes wrong Legislation and ethics: the rules and standards that shape the industry Professional skills: the behaviours ...