1 to 25 of 42 Contract Incident Response Jobs in the North of England

Position Summary We are recruiting on behalf of a client in the Critical National Infrastructure (CNI) sector for a Cyber Incident Management Coordinator to deliver, evolve, and implement the organisation's approach to managing cyber incidents, including processes, roles, and escalation paths. This newly established role supports the Cyber … Incident Team Lead in embedding cyber incident response practices, aligning with regulatory frameworks such as the Cyber Assessment Framework (CAF). You will work collaboratively across Cyber Security, HR, Finance, Legal, and Communications teams to deliver enterprise-wide outcomes and drive incident preparedness. What ...

Cyber Response and Recovery Manager £75,000 - £85,000 GBP Hybrid WORKING Location: Manchester, Central London, Greater London - United Kingdom Type: Permanent We are seeking an experienced Cyber Response & Recovery Manager to join a specialist Cyber Response Services team, supporting clients through some of their most complex … cyber incidents, helping organisations restore critical services, rebuild compromised environments, remove attacker persistence, and strengthen their long-term cyber resilience. You will work alongside incident response teams, forensic specialists, technology teams, senior stakeholders and client leadership to translate incident findings into practical recovery and remediation plans. ...

monitoring, detecting, analysing, and responding to security threats and incidents. You will help drive continuous improvements across security operations while ensuring robust monitoring and incident response capabilities are maintained. Key Responsibilities Manage the day-to-day operation of the SIEM platform, including monitoring, administration, and optimisation. Develop, fine … tune, and maintain detection rules and use cases to improve threat visibility. Investigate security alerts and incidents through to resolution. Provide effective monitoring and incident response capability across the organisation. Analyse security events to identify trends, attack patterns, and emerging threats. Escalate and track security issues through ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

like to hear from you. The role Working closely with experienced IT and security colleagues, you'll learn to identify threats, support incident response and help strengthen security across the organisation's systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts … helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following ...

learn from cyber incidents. This is a varied position combining hands-on technical recovery, analysing, planning and testing and coordinating between Business Continuity, Incident Response and Cyber Recovery. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business Continuity … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

looking for a Cyber Security Lead to provide day-to-day leadership across its cyber security function. You'll lead the team, oversee incident response and vulnerability management, support the organisation's cloud security journey and act as a senior security contact across the wider IT department. This … vulnerability remediation and system hardening. Act as the escalation point for security incidents both in and outside normal working hours. Own the cyber security incident process and lead incident simulations and war-game exercises. Manage post-incident forensic investigations and reporting, engaging third-party specialists where appropriate. ...

Leeds (Hybrid) About the role You'll protect key business assets by monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with … Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define and fine-tune SIEM rules, and investigate alerts and incidents through to completion. Incident response: Gather and analyse data, then contain and respond to cyber security incidents as part of a dynamic monitoring and response capability. Threat ...

organisation's systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you You'll bring a curious mind ...

organisation's systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you You'll bring a curious mind ...

organisation's systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you You'll bring a curious mind ...

organisation's systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you You'll bring a curious mind ...

hosted services on Google Cloud Platform. This is a hands-on engineering role spanning SRE practices, production Kubernetes, infrastructure automation, observability, CI/CD, incident response and continuous service improvement. About the role The Senior Site Reliability Engineer will work with Cloud Platform, Software Engineering, Product, Security … teams to design and operate resilient services. The role will use software engineering and automation to reduce operational toil, improve service health and turn incident learning into measurable reliability improvements. Key responsibilities Lead reliability, availability, scalability and performance improvements across GCP-hosted applications, platforms and shared services. Define ...

root cause analysis, and implementation of corrective actions to maintain service reliability and security. Required Skills: * 5+ years in Security Operations/SOC or Incident Response, including in a 24×7 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention ...

Senior Threat Hunter: Lead advanced hunting methodologies, mentor the team, and drive technical innovation. Threat Hunter (Intermediate/Junior): Deliver proactive hunting activities, support incident response, and grow your expertise in a complex environment. Key Responsibilities (Both Levels): Proactively hunt for indicators of compromise and adversary tactics across … improve detection logic. Adapt hunting techniques to unique OT/ICS environments (legacy systems, operational safety). Produce clear, actionable reports and recommendations. Assist incident response with technical analysis and threat context. Drive automation and scripting initiatives. What We Are Looking For: Essential Skills (Both Levels): Practical experience ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

This is a hands-on role focused on identifying cyber threats, improving detection accuracy and reducing false positives. You'll work closely with SOC, Incident Response, Threat Intelligence and Security Engineering teams. Working across AI workflows. Key Responsibilities Design, build, test and maintain security detections. Manage detections through … logging, telemetry and data quality. Use AI/LLMs and Agentic AI to support SOC detection, triage and response. Work closely with SOC analysts, Incident Response and Threat Intelligence teams. Maintain clear documentation, runbooks and detection standards. Essential Skills Strong SOC/Detection Engineering experience within a large ...

Major Incident Manager Location: Sheffield Day Rate: Up to 500 per day Inside IR35 Duration: Until end March 2027 (with likely extension) Type: Full-time, 5 days per week Hybrid: Ideally 3 days in the office but can flex, remainder remote We're seeking a Major Incident Manager … lead the response to critical incidents across complex enterprise environments. You'll work closely with technical teams, suppliers and stakeholders to restore services quickly, reduce recurring incidents and help build a more proactive operational model. We are looking for someone who understands complex environments, can influence senior stakeholders ...