1 to 25 of 87 Permanent Incident Response Jobs in Manchester

transform through cloud, cyber security, AI and digital innovation. As our Managed Services capability continues to grow, we're looking for an experienced Cyber Incident Response Consultant to join our Security and Infrastructure Operations Centre (SIOC), based in either London or Manchester. This is a hands-on, customer … facing consultancy role focused on investigating, responding to and recovering from cyber security incidents across complex customer environments. You will support and lead incident response engagements, conduct digital forensic investigations and advise customers on strengthening their cyber resilience and incident response capabilities. You will work primarily ...

responds, and mitigates cybersecurity risk, protecting EY and client data, and our information management systems. The opportunity The Cyber & Investigative Services (CIS) Senior Cyber Incident Response Coordinator will exercise exemplary incident management techniques to coordinate incident response to cybersecurity events or incidents stemming from suspected … threats on a global scale. Candidates for the role must have an exceptional comprehension of cybersecurity incident response plans and coordination of activities, establish and foster relationships on a global scale, and have superb verbal and written communication skills. Additionally, candidates must have a sense of diplomacy, ability ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to identify, contain and investigate sophisticated cyber threats across traditional, hybrid and cloud-hosted environments. You will investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact ...

Description AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain … technical security concepts to non-technical audiences. AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance. This team is building toward an AI-augmented … expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want ...

Manchester seeks a Senior Cyber Incident Response Coordinator to lead global incident response efforts, coordinating across IT, Legal, and Risk Management. You will drive playbooks, ensure timely communications, and align with EY's enterprise security goals. The role requires deep incident response expertise, hands ...

# Digital Forensics & Incident Response*Candour***Manchester, England**Onsite · Senior · Full-time · £80,000.00/yr - £90,000.00/yr### The RoleThis position involves independently investigating security incidents using a specialist platform, validating findings, and identifying forensic evidence. The successful candidate collaborates with engineers to refine automated investigation … supports customers by explaining findings and advising on product features.### Skills & ExperienceCandidates need at least five years of hands-on digital forensics and incident response experience, strong skills analysing forensic evidence and attacker techniques, and excellent communication abilities. Familiarity with forensic platforms such as Magnet Axiom is beneficial ...

technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including … high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

Amazon AWS Security Incident Response is seeking a Security Engineer I to join a fast-paced team responsible for threat detection and incident response across customer environments. The role emphasizes learning, collaboration, and communicating complex security concepts to non-technical audiences. You will monitor networks ...

Tier-1 customer-facing services, in partnership with Product and Engineering. Establish error budget policy and the enforcement mechanism when budgets burn. Design the incident command structure: severity rubric, declaration criteria, war-room protocol, stakeholder communication cadence, and the postmortem template. Train the first cohort of incident commanders … already in use) over net-new procurement. Define the instrumentation standards all new services must meet. Partner with the VP to migrate the interim incident response RACI — currently held by matrixed individuals across IT, Engineering, Support, and Enterprise Security — into a durable SRE-owned model. Establish ...

UBDS Group is seeking an experienced Cyber Incident Response Consultant to join our SIOC, based in London or Manchester. You will lead and perform digital forensics, investigations and incident response for complex customer environments, focusing on Microsoft and AWS and working with SIEM/EDR tooling. … will mentor junior staff, contribute to playbooks and runbooks, and help grow our managed services capability through evidence-based improvements and post-incident reviews. #J-18808-Ljbffr ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies. Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: Cloud Infrastructure/Security. Endpoint Detection and Response. Perimeter detection … tooling. Investigating and responding to security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. About your Skills We’re open-minded when it comes ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

conversation around what flexibility could look like for you. The roles main functional responsibilities include: Management of a small team of technical specialists delivering Incident, Threat, Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security … externally sourced services. Implement (and maintain) clear UK owned processes and procedures as required for all aspects of Operational Security Through team, lead the response to UK impacting security incidents and personal data breaches, problem solve and co-ordinate across relevant teams to drive a rapid return ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

readiness, and ongoing compliance monitoring. Assist with the identification, assessment, and documentation of security risks. Track remediation actions and follow up with control owners. Incident Response & Problem Support Support security incident response activities, including investigation and evidence gathering. Assist with root cause analysis and documentation … Experience Experience in an information security, IT risk, or IT operations role. Understanding of common cybersecurity risks, threats, and control types. Familiarity with incident management, risk assessment, and assurance activities. Ability to analyse information, identify issues, and document findings clearly. Strong written and verbal communication skills. Ability to manage ...

mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access ...

# NMC Cyber Incident Responder (Digital Forensics)*Police Digital Service***Wigan, England**Hybrid · Senior · Full-time### The RoleWorking within a National Management Centre Cyber Incident Response team, the role involves leading investigations into ransomware, malware, unauthorised access and insider threat incidents affecting UK policing. … analysis of endpoints, servers and cloud environments, producing defensible findings for operational and legal audiences, and briefing Chief Officers and senior IT leaders throughout incident lifecycles.### Skills & ExperienceCandidates should have hands-on experience in enterprise digital forensic investigations, endpoint and memory forensics, and log analysis using EDR telemetry ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to i click apply for full job details ...

Amazon EU SARL (UK Branch) is seeking technical Security Engineers for AWS Security Incident Response to learn rapidly and work in teams to keep customers secure. You will lead security response, explain concepts to non-technical audiences, and operate with AWS technologies at scale. Responsibilities include threat … triage, incident handling, and collaboration with partner teams, with on-call duties and commitment to continual learning and improvement of security controls. #J-18808-Ljbffr ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...