1 to 25 of 33 Contract Incident Response Jobs in the UK excluding London

ongoing and long-term thereafter) IR35 status: Inside IR35 (Umbrella) Cyber Threat Operations Specialist Job Description: An opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts … tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop ...

will play a key role in detecting, investigating and responding to cyber threats, while helping to improve the organisation's overall security monitoring and incident response capabilities. The role combines hands-on security operations, tooling optimisation and continuous improvement across a varied technology estate. Key responsibilities: Monitor, triage … investigate security alerts and incidents across IT, cloud and OT environments. Lead or support incident response, including containment, eradication, recovery and escalation. Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. ...

deployment, testing, go-live and ongoing operational support. Work with technical and non-technical stakeholders to deliver secure and practical outcomes. Support security monitoring, incident response and continuous improvement initiatives. Contribute to security architecture reviews and technology roadmap discussions. Ensure security controls remain effective across both cloud … Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates who can demonstrate experience of: Assessing technical ...

Technical Support Manager, you will lead the operational support, maintenance and resilience of high-availability Operational Technology systems. You will oversee service delivery and incident response while ensuring that patching, vulnerability remediation and planned maintenance activities are managed effectively. The role will also involve workforce planning, capability development … leadership of a technical support team. Key responsibilities Lead the operational support and maintenance of high-availability OT systems. Manage incident response, fault diagnosis, system recovery and operational resilience. Oversee service delivery across the supported OT environment. Coordinate OT patching, maintenance and vulnerability remediation activities. Plan and allocate ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

highly available cloud services. Support business stakeholders in adopting modern cloud-native architectures and security best practices. Develop and implement automation for security monitoring, incident response, remediation, and operational processes. Ensure cloud platforms comply with organisational security standards, governance requirements, and software development lifecycle practices. Identify, assess … gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions to standardise and automate cloud ...

Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication and recovery. Developing and improving detection rules and playbooks. Producing high-quality incident documentation and reports. Supporting and mentoring Tier 1 analysts. Tier 3 SOC Analyst As a Tier 3 Analyst, you'll provide advanced technical investigation … senior escalation point for complex incidents. Responsibilities include: Leading complex and high-severity security investigations. Advanced threat hunting and incident response. Malware, endpoint, network and forensic investigation. Developing advanced detections and response capabilities. Root-cause analysis and post-incident investigation. Supporting major incident response. Working closely ...

security policies, standards and control frameworks. Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders. Lead security incident preparedness, response oversight and resilience planning. Drive cyber maturity improvements across people, process and technology. Manage security risk assessments and remediation programmes. Ensure … leading enterprise-wide cyber security programmes. Strong background covering: Operational Security Security Governance Cyber Risk Management Cyber Assurance Security Strategy Third-Party Security Management Incident Response & Cyber Resilience Experience overseeing or working alongside managed SOC services. Strong stakeholder management skills with the ability to engage both technical ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post-incident improvement activities. Embed security by design through secure coding practices, threat modelling, role-based access control and least ...

offices on a hybrid basis. Cyber Security Specialist: Duties Adequate Implementation of security controls - XDR Escalation pint for security tickets raised in ITSM and Incident Management Portals Implementation/Operation of InfoSec processes, Threat Hunting, detection, monitoring and incident response Delivery of cyber security projects, implementation …/Testing cyber security technologies Support with controls, IAM, patch management and security event monitoring Identify cyber threats, hunting and exposure Involved in InfoSec incident management process - preparation, containment, analysis and response Implementation of new cyber security tooling and threat-informed systems Cyber Security Specialist: Experience ...

line with agreed SLAs, following escalation processes as appropriate Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes Coordinate with incident & Technical managers, following incident management process during high-severity incidents Identify underlying ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

partnership with a leading public organisation seeking an SOC Manager to design, implement and continuously improve the departments Security Operations strategy, ensuring rapid detection, response and recovery from cyber threats and incidents. What will you be doing? Lead, mentor, and develop a high-performing SOC analyst team, using … career framework to identify learning needs and map progression paths. Own the full incident lifecycledetection, triage, escalation, containment, and resolutionrun post-incident reviews, and drive continual improvements through regular exercises. Serve as the escalation point for alerts; prioritise and direct enhancements to monitoring coverage and detection rules across ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

best practices, including IAM design, logging/monitoring, network security controls and workload security. Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience. Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments ...

cutting-edge technologies and contribute to the stability and performance of their network infrastructure. Key Responsibilities: Monitoring and Management: Oversee Monitoring Event Management and Incident Management, ensuring timely Level 1 triage of networking issues. Network Operations: Provide operational support for network environments, including switching, routing, perimeter security, traffic management … advanced tools such as Splunk, SevOne, IBM Watson AI Ops, Wireshark, NetScout, and Gigamon to identify service impacts and interpret monitors, dashboards, and logs. Incident Response: React effectively to production failures, managing triage efforts, engaging appropriate teams, and communicating with management and technical escalation. Documentation and Reporting: Maintain ...

maintain effective cybersecurity controls, risk management frameworks and data protection measures. Oversee the monitoring of technology environments for security threats and vulnerabilities, coordinating incident response and remediation activities where required. Vendor & Financial Management Develop and manage strong relationships with technology suppliers and service providers, ensuring value, performance ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

with some of the following: SIEM technologies such as Microsoft Sentinel, Splunk or QRadar Security Operations Centre (SOC) environments Threat detection, threat hunting or incident response Scripting and automation using Python, PowerShell or similar Security tooling, integrations and log management Microsoft Defender, XDR or other endpoint security platforms ...