21 of 21 Remote/Hybrid Contract Incident Response Jobs

Security Incident Response Engineer (ServiceNow) Contract: 6 Months (Likely Extension)Location: HybridIR35: Outside/LTD – £700PDSC Cleared/BPSSA highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC).This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling. Key Responsibilities ServiceNow SIR Workflow Design & Development Design and configure ...

Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred … Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow ...

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, supportmonitoringand incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement … whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

major project by reviewing a large volume of applications and ensuring they meet security standards before deployment. Whilst there is some exposure to Cyber Incident Response activities, this is very much a hands-on security assessment role where you'll be expected to work independently and manage … management tools such as Qualys (or similar) to assess security risks. Support ongoing cybersecurity project delivery within a high-profile programme. Assist with Cyber Incident Response activities where required, including security monitoring and investigation. What we're looking for We're looking for someone ...

Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with troubleshooting expertise. Communication & Documentation ...

wider Microsoft Security stack. You will work closely with Security Operations, Infrastructure, and Cloud teams to strengthen the organisation's security posture and improve incident detection and response capabilities. Key Responsibilities Design, implement, configure and support Microsoft Sentinel solutions . Lead and support SIEM migration projects from legacy … Sentinel . Develop and maintain analytics rules, alerting capabilities and detection use cases. Create and optimise Kusto Query Language (KQL) queries for threat hunting, incident investigation and reporting. Integrate and onboard new log sources and security tooling into Sentinel. Configure and support Azure Monitor and Log Analytics environments . ...

point for complex issues impacting business-critical services. Execute technical recovery actions during incidents to restore service as quickly as possible. Participate in Major Incident and High-Priority Incident response activities. Technical Troubleshooting Diagnose and resolve application, infrastructure, integration, database, and data-related issues across supported products … architecture, business processes, and operational dependencies. Problem Management & Continuous Improvement Conduct root cause analysis (RCA) and contribute to Problem Management processes. Participate in post-incident reviews and recommend long-term preventative solutions. Drive continuous service improvement through automation, process optimisation, tooling enhancements, and reduction of recurring incidents. Monitor service ...

Outside IR35) Contract: 6-month rolling contract Location: Liverpool (Hybrid) Keywords: Information Security, Cyber Security, ISO27001, NIST, Risk, Governance, Vulnerability Management, Incident Response, Outside IR35 A leading organisation within the transport and logistics sector is looking for an Information Security Analyst to join its Group IT function … bring Previous experience in an Information Security, Cyber Security or IT Security Analyst role. Strong understanding of security principles including risk management, vulnerability management, incident response and access control. Knowledge of security frameworks such as ISO 27001, NIST or Cyber Essentials . Experience with common security technologies such ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Work in collaboration with CSC DEx in other Natcos (International Group Companies France, Italy, Germany, Spain etc) Skillset/… functions and operating models. Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering Awareness of Incident response processes. Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs ...

budget requirements. Collaborate with engineering teams to architect and deliver scalable cloud-native services. Drive automation initiatives across cloud operations, security controls, remediation, and incident response processes. Support stakeholders in adopting modern cloud-native architectures and best practices. Ensure cloud infrastructure and application architectures align with security, compliance … Monitor, assess, and improve cloud security posture through proactive threat identification and mitigation. Contribute to CI/CD pipeline design, implementation, and optimisation. Support incident, problem, and change management activities within cloud environments. Provide technical leadership and guidance on cloud security technologies, standards, and governance. Required Skills & Experience Proven ...

workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong commercial experience with AWS, Azure … understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

third-party and business continuity challenges. The successful candidate will play a key role in shaping resilience strategy, delivering testing and exercising programmes, supporting incident response activity and providing expert advice to senior stakeholders across the business. This role offers significant visibility, exposure to executive-level decision-making … tangible impact within a collaborative and purpose-driven organisation. Key Responsibilities Lead the management and continuous improvement of operational resilience, business continuity and incident management frameworks. Partner with business leaders to provide expert guidance, support and challenge on resilience-related matters. Maintain Important Business Services, impact tolerances, dependency mapping ...

stakeholders and influence decision-making across multidisciplinary teams. Engage with partners and vendors to align solutions with best practice and regulatory requirements. Resilience & incident support: Contribute to incident response, disaster recovery and continuity planning by ensuring that architecture and processes support resilient operations. Essential requirements SecurityCheck ...

multi-supplier environment THE CYBER SECURITY CONSULTANT ROLE: You will support the transition to a SIAM operating model by governing and aligning security incident and vulnerability management processes across multiple suppliers. This is a governance focused role, ensuring consistent standards, reporting and assurance rather than carrying out hands … incident response activities. You will: Align incident and vulnerability management processes across suppliers Govern high severity security incidents and vulnerability lifecycles Coordinate suppliers to ensure consistent delivery and reporting Support audit readiness through evidence and assurance activities Produce clear reporting for governance forums and BAU transition CYBER ...

secure-by-design engineering and ensure compliance with MOD security standards. Enable and govern Infrastructure as Code practices across teams and environments. Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked. Document security processes, controls and operational runbooks in Confluence. ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

operational security activities. Analyse suspicious activity and escalate potential threats where appropriate. Support vulnerability management and remediation activities across the organisation. Assist with incident response, security investigations and cyber improvement initiatives. Work closely with end users to provide security advice and support. Key Skills & Experience Required: Previous experience … working as a Cyber Security Analyst. Strong experience using Microsoft Sentinel for alert monitoring, investigation and incident management. Good understanding of Microsoft security technologies, including Microsoft Defender and Microsoft 365 security controls. Experience investigating cyber incidents such as phishing attacks, malware, account compromise and suspicious user activity. Familiarity with ...

delivering cyber security awareness programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working ...

security policies to reduce false positives and improve threat detection Analyse security events, logs, and alerts to identify malicious activity and attack patterns, providing incident response support including investigation, mitigation, and post-incident analysis Use TrafficPeak and Grafana to create dashboards, interpret traffic spikes, fine-tune thresholds ...

identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. - Drive intelligence-led decision-making across the organisation. Act as a subject matter expert for threat intelligence tools ...