1 to 25 of 29 Permanent Incident Response Jobs in Manchester

Director, Digital Forensics & Incident Response (Global) Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Matt Hull (Open to Associate Director with progression path to Director) Description The purpose of this role is to lead NCC Group’s global Digital Forensics … Incident Response (DFIR) capability, ensuring effective preparedness, response, recovery, and continuous improvement across cyber incident management and forensic investigations. The global DFIR team will consist of regionally distributed colleagues, delivering a consistent, scalable, and market-leading service that protects client assets, reputation, and business operations. ...

that security operations activities are executed efficiently, consistently and in line with defined SLAs and operational standards, through hands‐on technical leadership across SOC, Incident Response, Threat Intelligence, Insider Risk and Vulnerability Management. This role acts as a senior technical escalation point, supporting complex investigations and driving improvements … detection, response, automation and operational processes. The role holder is expected to lead through expertise, supporting analysts and ensuring Security Operations operates with discipline, quality and continuous improvement. Key Responsibilities Act as the primary technical escalation point for security events and incidents identified by the Security Operations team. Support ...

that security operations activities are executed efficiently, consistently and in line with defined SLAs and operational standards, through hands-on technical leadership across SOC, Incident Response, Threat Intelligence, Insider Risk and Vulnerability Management. This role acts as a senior technical escalation point, supporting complex investigations and driving improvements … detection, response, automation and operational processes. The role holder is expected to lead through expertise, supporting analysts and ensuring Security Operations operates with discipline, quality and continuous improvement. The key responsibilities of the role are: Act as the primary technical escalation point for security events and incidents identified ...

infrastructure and established a modern, cloud-first security stack, it is an exciting time to join the business as we mature our detection, response, and automation capabilities across a global estate. You will work collaboratively with the business and the wider IT team - Infrastructure, Network, Development, DevOps, and Service … with Palo Alto Cortex XSIAM and XSOAR, Cortex XDR, Microsoft Purview, Mimecast, Abnormal, Nessus, and Microsoft 365. You will participate in security investigations and incident response, responding to events involving malware, data loss, phishing, or network intrusion, and supporting our data protection and vulnerability management activity. You will ...

Group plc seeks a Director, Digital Forensics & Incident Response (Global) to lead the global DFIR capability, setting strategic direction and ensuring effective preparedness, response, recovery, and continuous improvement across cyber incident management and forensic investigations. The role requires driving operational excellence, collaborating with NCC Group leaders … expanding security services through incident response opportunities. #J-18808-Ljbffr ...

expected to independently manage monitoring platforms, triage and resolve incidents, validate backup operations across both cloud and on-premises environments, and provide meaningful first-response support for critical P1 and P2 incidents. You will work within a dedicated five-person team participating in a weekly on-call rota … provide 24x7 P1 incident response coverage. The role demands strong technical foundations across both Microsoft Azure and VMware virtualisation platforms, along with a disciplined approach to ITSM processes, documentation, and patching support. WHAT WE EXPECT Minimum of 3-5 years of experience in enterprise infrastructure support roles, ideally ...

focused on monitoring, analysing and responding to security threats, while driving continuous improvement across our security operations capability. Youll play a key role in incident response, threat intelligence, vulnerability management and ensuring effective use of our security tools and processes to reduce risk across the technology estate. ...

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

many of these technologies/areas as possible is highly desirable: Security Frameworks (NIST, CIS etc.) PAM Tools and Technologies AWS Security Incident Response Endpoint Security (including mobile devices, Windows and Linux) Job Benefits We have a high-performance culture which is balanced evenly with world-class well ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

through to a fix. You'll act as the technical authority for the operational team: taking ownership of complex incident resolution and root cause analysis, leading platform engineering and hardware lifecycle work, and mentoring Infrastructure Engineers as they develop their own skills. You're expected to be comfortable making … high-stakes calls under pressure during major incidents, and to drive resolution when nobody else can. Day to day, that means leading the technical response to P1 and P2 major incidents, managing Dell VxRail and VMware VCF platform lifecycle operations, overseeing Veeam backup architecture and Azure DR strategy ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud, and SOC teams … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

automation frameworks, and database‐as‐code practices using Redgate Flyway. Take ownership of critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate closely with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure‐by‐design, compliance ...

code, automation frameworks, and database-as-code practices using Redgate Flyway. Own critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure-by-design, compliance-by-design ...

improving, and troubleshooting the reconciliation pipeline across environments Manage and optimise core managed services: EKS, MSK, and RDS, including scaling, patching, cost governance, and incident response Maintain and extend infrastructure‐as‐code using Terraform, ensuring consistency, modularity, and alignment with AWS best practices Support and improve GitHub Actions … ability to support and troubleshoot Java/Kotlin and/or Python services running in containers Strong operational mindset, comfortable with on‐call responsibilities, incident management, and root cause analysis What we’ll offer you: We trust people to do their best work. That means flexibility over rigid rules ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...

mesh (Istio) where appropriate. Drive continuous improvement by identifying bottlenecks, automating manual processes, and sharing knowledge across engineering teams. Ensure robust monitoring, alerting, and incident response processes are in place to maintain high availability and reliability of banking services. Foster a culture of collaboration, learning, and inclusion, supporting ...

pipelines through Azure DevOps. You'll also act as the escalation point for T1 engineers and play a key role in P1 major incident response as part of a 1-in-5 weekly on-call rota. On-call compensation is provided. What We're Looking … what you're responsible for, whether that's hitting a >95% Linux patching compliance SLA, maintaining >98% backup success rates, or driving an escalated incident to resolution without needing to push it further up the chain. You're automation-first in your thinking and disciplined in your approach ...

Bell is seeking a Security Operations Technical Lead to support the Head of Security Operations. You will provide hands-on technical leadership across SOC, incident response, threat intelligence and vulnerability management to detect, investigate and respond to security events. You will lead and improve detection, response, automation ...

First Automation & Intelligent Tooling Define and lead an AI-first automation roadmap for Engineering Infrastructure and Enterprise Tooling (e.g., reducing waste, accelerating reviews, improving incident response, increasing release confidence). Architect and ship AI/LLM-enabled workflow automation across the SDLC (e.g., risk assessment, automated build, test … impact analysis, auto-triage of build/test failures). Establish policies and guardrails for AI usage in internal tools: data handling, prompt/response logging, model/provider selection, evaluation, fallback behaviors, and abuse prevention . Dev Productivity & Enterprise Tooling (Global Scale) Set technical direction and standards ...

lifecycle activities Support and remediate Veeam backup and recovery operations Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, ideally within managed services Strong … Experience supporting enterprise backup technologies such as Veeam Knowledge of WSUS, SCCM, and patch compliance processes PowerShell scripting and automation experience Strong troubleshooting and incident management skills Why Join? Work with modern Azure, VMware, Windows, and enterprise backup technologies Take ownership of critical infrastructure services and large-scale patching ...

plan. A costed infrastructure resilience plan for Manchester within 90 days, tied to the Squadron 42 launch window. Formal patch management, a tested ransomware response runbook, and a corporate penetration test completed before ship. An upgraded Manchester service desk capable of Tier 2 and Tier 3 work, with engineers … leadership across a multi-site, complex technology environment, with single-point accountability for a major transformation. Single-point accountability for cybersecurity at scale, including incident response, regulatory exposure, and board-level reporting on risk. A background in games, VFX, animation, or a similarly technical creative studio. You must ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment click apply for full job details ...