15 of 15 Contract Incident Response Jobs in the North of England

Security Incident Response Engineer (ServiceNow) Contract: 6 Months (Likely Extension)Location: HybridIR35: Outside/LTD – £700PDSC Cleared/BPSSA highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC).This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling. Key Responsibilities ServiceNow SIR Workflow Design & Development Design and configure ...

Rate: £750 per dayIR35 Status: Outside IR35Contract Length: 6 months initiallyLocation: Hybrid - Liverpool Overview I'm supporting an organisation seeking an experienced Cyber Incident Response Manager to lead and mature its Incident Response capability across a complex enterprise environment. Responsibilities Own and manage cyber incidents from … detection through to resolution. Review, enhance, and develop Incident Response frameworks, runbooks, and playbooks. Ensure alerts from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. ...

Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred … Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow ...

Blends hands-on incident command and digital forensics with programmatic capability building. Establishes the CSIRT operating model, creates scenario playbooks (ransomware, exfiltration) from scratch, and leads technical containment/recovery during active security events. About the Role My client is a well established business, looking for a hands … CSIRT Lead to establish and run the cyber incident response capability across a complex, multi-site industrial and corporate estate. The role blends hands-on incident command and digital forensics coordination with the programmatic build-out of incident playbooks and operational runbooks from scratch. Key Responsibilities ...

Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with troubleshooting expertise. Communication & Documentation ...

point for complex issues impacting business-critical services. Execute technical recovery actions during incidents to restore service as quickly as possible. Participate in Major Incident and High-Priority Incident response activities. Technical Troubleshooting Diagnose and resolve application, infrastructure, integration, database, and data-related issues across supported products … architecture, business processes, and operational dependencies. Problem Management & Continuous Improvement Conduct root cause analysis (RCA) and contribute to Problem Management processes. Participate in post-incident reviews and recommend long-term preventative solutions. Drive continuous service improvement through automation, process optimisation, tooling enhancements, and reduction of recurring incidents. Monitor service ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong commercial experience with AWS, Azure … understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

bring Previous experience in an Information Security, Cyber Security or IT Security Analyst role. Strong understanding of security principles including risk management, vulnerability management, incident response and access control. Knowledge of security frameworks such as ISO 27001, NIST or Cyber Essentials . Experience with common security technologies such ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

least privilege implementation. Assist with penetration testing and remediation activities. Support security compliance with financial services regulatory requirements. Collaborate with Security Operations and Incident Response teams during security events. Support security assurance for third-party integrations and supplier solutions. Contribute to DevSecOps tooling and automated security testing. Promote ...

identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. - Drive intelligence-led decision-making across the organisation. Act as a subject matter expert for threat intelligence tools ...

manage multiple priorities effectively. Some other highly valued skills may include: Relevant security or project management experience. Background in operational environments, IT Infrastructure, incident response and change management. Strong documentation skills for operational procedures. Familiarity with SharePoint, Confluence, and JIRA. Unix/Windows operating system knowledge. All profiles ...

manage multiple priorities effectively. Some other highly valued skills may include: Relevant security or project management experience. Background in operational environments, IT Infrastructure, incident response and change management. Strong documentation skills for operational procedures. Familiarity with SharePoint, Confluence, and JIRA. Unix/Windows operating system knowledge. All profiles ...

keep organisations secure Threat intelligence: how to spot risks before they become problems Security testing: finding vulnerabilities and putting the right controls in place Incident response: what to do when something goes wrong Legislation and ethics: the rules and standards that shape the industry Professional skills: the behaviours ...