1 to 25 of 33 Permanent Incident Response Jobs in Leeds

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

timely and proactive escalation of potential events/items of interest. The role will include access control, application and development, risk management, operational security, incident response, business continuity, operational and physical security of systems, as well as ongoing user training and reporting requirements. Primary responsibilities include: Monitor, investigate … with Detection and Automation team to support development of detection alerts, security automation and recommendations for tuning of rules to reduce false positives Support incident investigation, containment, eradication, and recovery activities while maintaining accurate documentation, and contributing to the continuous improvement of detection capabilities, playbooks, and operational processes Respond ...

operations, partners, service levels and governance into a clear global operating model. Strengthen identity, device, access, data protection, security testing, incident response and business continuity controls. Improve integration, adoption and training across core business systems, telephony, call-centre and clinical support platforms. Establish proportionate governance for AI, enterprise … strategy, infrastructure, cloud services, end-user support, device management and service performance. Own cyber security strategy, identity and access management, vulnerability management, penetration testing, incident response and security awareness. Maintain IT policies, procedures, acceptable-use and content controls, and the evidence required for audit or inspection. Lead business ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Technical Incident Commander Department: 61-458 - Technology - Live Operations Employment Type: Permanent - Full Time Location: UK - Leeds Reporting To: Adam De Silva Description Why Join DAZN? DAZN is one of the world’s leading sports streaming platforms, delivering live and on-demand content to millions of fans across … globe. In an always-on environment, service continuity is critical. As a Technical Incident Manager, you’ll be at the forefront of restoring services when issues arise, owning the process of critical incident response across our global tech infrastructure. This is your opportunity to directly influence ...

Risk and Control Assessment: Identify security risks, vulnerabilities, control gaps and emerging threats within assigned workstreams, supporting proportionate remediation, escalation and risk treatment activity. Incident Response: Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder updates, reporting and escalation. Compliance … activity, proposing recommendations where necessary. Workstream and Control Support: Support Information Security activity where it relates to assigned workstreams, user and data security controls, incident response, control operation, evidence, reporting, policy compliance, remediation or escalation. Threat Awareness and Continuous Improvement: Maintain awareness of emerging cyber security threats, technology ...

audiences. Influence technical decisions whilst balancing security, resilience and delivery outcomes. Essential Skills & Experience Strong background within Security Architecture, Cyber Security Engineering, Security Operations, Incident Response, Infrastructure Architecture, Network Architecture or a related technical security discipline. Excellent understanding of networking fundamentals, protocols, infrastructure design and security architecture principles. … Particularly Relevant Backgrounds The hiring team is particularly interested in candidates who have progressed into security from technical disciplines such as: Security Operations (SOC) Incident Response Penetration Testing Infrastructure Engineering Systems Administration Network Engineering or Network Architecture Candidates from government and other highly regulated environments are often well ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic improvement. Support disaster recovery testing to validate recovery plans … integrating AI or agentic tooling into engineering workflows (e.g. IaC generation, automated remediation, or documentation). Exposure to compliance‐evidence or governance tooling and incident‐management tooling. Additional Information This is a hybrid role, with attendance at our Leeds office once a month. Participation in the on‐call rota ...

improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation. Key Responsibilities Manage and enhance Microsoft security, compliance and data protection … access control (RBAC), access reviews and Joiner-Mover-Leaver processes. Identify security risks, vulnerabilities and control gaps, driving remediation activity where required. Support security incident investigations, coordination, reporting and escalation. Assist with audits, compliance activities and the maintenance of security control evidence. Produce meaningful security reporting and insights ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

rotations, certificate renewals and infrastructure upgrades Contribute to the management and resolution of complex L2/L3 incidents Conduct root cause analysis and post-incident investigations Maintain and update runbooks and operational documentation Participate in an on-call rota, including out-of-hours incident response Mentor … infrastructure-as-code technologies such as Terraform Solid understanding of ITIL practices Experience supporting and operating production systems within an on-call environment, including incident triage, technical investigation, remediation and post-incident review. Experience implementing and deploying production changes in business-critical environments. Strong troubleshooting and root-cause ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise problems. Monitoring and gathering … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) Networking & Edge ...

controls. Help establish governance and assurance from POC through to production. Address data access, permissions, IAM, DLP and non-human identity risks. Develop AI incident response and assurance approaches. Assess AI models, vendors and third-party risks. Lead client workshops and contribute to proposals and pre-sales. Develop ...

fault diagnosis, equipment deployment, replacement and setup activities. Act as a technical escalation point for Service Desk teams, offering guidance and expertise. Support major incident response activities and contribute to post-incident reviews. Identify recurring issues and drive problem management and continuous improvement initiatives. Maintain accurate technical … users. Experience maintaining high‐quality technical documentation and asset records. Experience with problem management, root cause analysis and service improvement initiatives. Exposure to major incident management and technical investigations. Knowledge of endpoint management and monitoring tools such as Intune, JAMF or similar platforms. Familiarity with PowerShell, automation or scripting ...

pipelines to enable frequent, automated and reliable software delivery.Improve platform reliability through observability, monitoring, automated testing and disaster recovery practices.Support production systems, participate in incident response and contribute to continuous service improvements.Collaborate with engineers, architects and stakeholders to deliver scalable platform solutions that meet business needs.Contribute to platform … Terraform.Knowledge of CI/CD technologies, GitLab CI, GitHub Actions, ArgoCD and modern software delivery practices.Familiarity with observability, security and operational excellence, including monitoring, incident management and platform reliability.Experience working in agile environments with a passion for automation, continuous learning and emerging technologies, including AI-powered engineering tools.What ...

engineering teams to translate technical requirements into scalable platform solutions. Mentor junior and mid-level engineers, participate in the on-call rotation, lead incident response for team-owned services and deliver engineering improvements that prevent recurring incidents. Skills 5+ years of experience in software, backend or platform engineering ...

infrastructure engineering or operations teams in a 24/7 service environment. Strong knowledge of infrastructure resilience, capacity planning, disaster recovery, business continuity and incident response. Experience planning and delivering infrastructure projects while coordinating internal stakeholders, vendors and managed service providers. Knowledge of security and regulatory frameworks relevant ...

security and IT risk registers, chairing the monthly risk meeting and ensuring action and remediations as agreed. Support business continuity, disaster recovery and major incident response and process. Support building a well-rounded security team, providing guidance and maturity across IT. Key Requirements Skills & Experience: 2–5 years ...

requirements and address platform needs###### Observability & Continuous Improvement* Maintain observability stack (Prometheus, Grafana, Loki) with comprehensive SLIs/SLOs and alerting* Create runbooks and incident response procedures* Drive cost optimisation strategies for internal cloud and AWS infrastructure* Eliminate toil through automation and optimise deployment pipelines for reliability improvements ...

blended customer and BAE staff team from our Leeds office. The role requires a minimum of security clearance and will support threat intelligence and incident response activities. Initial terms include 6- and 12-month contracts with potential extensions. #J-18808-Ljbffr ...

Group's cyber governance and security frameworks. Developing, reviewing and maintaining information security policies, standards and procedures. Managing and maintaining the Group Cyber Incident Response Plan. Working with IT, infrastructure, architecture, legal, privacy and business teams to ensure appropriate security controls are implemented. Reviewing vulnerabilities and cyber risks ...

participate in threat hunting, support detection automation, and help drive remediation with cross-functional teams. You’ll bring 5+ years in Security Operations/Incident Response, strong SIEM/EDR experience, and hands-on skills in KQL/SPL, PowerShell and Python. #J-18808-Ljbffr ...