1 to 25 of 190 Permanent Incident Response Jobs in the North of England

transform through cloud, cyber security, AI and digital innovation. As our Managed Services capability continues to grow, we're looking for an experienced Cyber Incident Response Consultant to join our Security and Infrastructure Operations Centre (SIOC), based in either London or Manchester. This is a hands-on, customer … facing consultancy role focused on investigating, responding to and recovering from cyber security incidents across complex customer environments. You will support and lead incident response engagements, conduct digital forensic investigations and advise customers on strengthening their cyber resilience and incident response capabilities. You will work primarily ...

responds, and mitigates cybersecurity risk, protecting EY and client data, and our information management systems. The opportunity The Cyber & Investigative Services (CIS) Senior Cyber Incident Response Coordinator will exercise exemplary incident management techniques to coordinate incident response to cybersecurity events or incidents stemming from suspected … threats on a global scale. Candidates for the role must have an exceptional comprehension of cybersecurity incident response plans and coordination of activities, establish and foster relationships on a global scale, and have superb verbal and written communication skills. Additionally, candidates must have a sense of diplomacy, ability ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to identify, contain and investigate sophisticated cyber threats across traditional, hybrid and cloud-hosted environments. You will investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact ...

Security Engineer I, AWS Security Incident Response AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious … activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities Respond to threat findings that indicate unauthorized activity has occurred Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. Contribute to the development of security ...

enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain … enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain ...

green and healthy future for all. Find out more about DDTS: Defra digital, data and technology blog LinkedIn Defra Jobs The Head of Security Incident and Response provides operational leadership of the Defra Group Security Incident Response Management (SIRM) capability, ensuring the organisation is prepared … able to respond effectively to, security incidents ranging from routine events to significant security incidents. As the senior lead for security incident management, the role oversees incident response policy, governance and operational coordination, directs the response to complex and high-impact incidents, and provides authoritative advice ...

Security Incident Management Analyst Location: Inverness or Preston | 5 days onsite Duration: 5 months possible extension Pay rate: up to £575 per day umbrella Clearance: Active SC clearance/UK sole national Role Description: The Security Incident Management Analyst operates within the Operational Integrator (OI) function … multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers. The role assists in ensuring security incidents are identified, tracked, escalated, and reported in accordance with client policies and agreed service levels. Working closely with suppliers, service management teams, and security stakeholders ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

What you will be doing Conduct in-depth investigations of malicious incidents or complex alerts escalated by analysts. Mentoring and training analysts. Assist in incident response and post-incident reviews. Prioritising and managing workload effectively, managing several open Incidents and requests whilst following existing procedures and best … Microsoft Sentinel, and Microsoft XDR A willingness to learn and good attention to detail. Experience in conducting security investigations and triaging alerts. Familiarity with incident response and post-incident reviews. Understanding of threat intelligence and its integration into operations. Strong communication skills for handling customer calls ...

respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance. This team is building toward an AI-augmented … expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

Manchester seeks a Senior Cyber Incident Response Coordinator to lead global incident response efforts, coordinating across IT, Legal, and Risk Management. You will drive playbooks, ensure timely communications, and align with EY's enterprise security goals. The role requires deep incident response expertise, hands ...

# Digital Forensics & Incident Response*Candour***Manchester, England**Onsite · Senior · Full-time · £80,000.00/yr - £90,000.00/yr### The RoleThis position involves independently investigating security incidents using a specialist platform, validating findings, and identifying forensic evidence. The successful candidate collaborates with engineers to refine automated investigation … supports customers by explaining findings and advising on product features.### Skills & ExperienceCandidates need at least five years of hands-on digital forensics and incident response experience, strong skills analysing forensic evidence and attacker techniques, and excellent communication abilities. Familiarity with forensic platforms such as Magnet Axiom is beneficial ...

capability/controls, with ongoing maturity assessments Conduct security due diligence assessments on any new/changed IS services impacting the business Conduct Cyber Incident Response testing in collaboration with team Support cyber incident response/investigations Oversee service provisioning and hosting of internal LoB apps …/release management Maintain apps (including SAP) build/support documentation (including Service Catalogue), drawing on outsourced providers Provide Master Data Management Handle major incident response (Apps, including SAP) Manage outsourced Apps support contract performance/resources, directing and supervising as required Act as the "glue" to connect ...

Description: Job Title: Cyber Incident Management Senior Specialist Corporate Title: Vice President Location: Chester At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Res The Team: Cyber Incident Response and Management is part of the Cyber Response & Recovery Team who provide a globally coordinated and managed response capability for information security events and incidents that may impact the confidentiality, integrity, and/or availability of the Bank’s information and information systems or has privacy implications. ...

technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including … high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks ...

timely and proactive escalation of potential events/items of interest. The role will include access control, application and development, risk management, operational security, incident response, business continuity, operational and physical security of systems, as well as ongoing user training and reporting requirements. Primary responsibilities include: Monitor, investigate … with Detection and Automation team to support development of detection alerts, security automation and recommendations for tuning of rules to reduce false positives Support incident investigation, containment, eradication, and recovery activities while maintaining accurate documentation, and contributing to the continuous improvement of detection capabilities, playbooks, and operational processes Respond ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

Amazon AWS Security Incident Response is seeking a Security Engineer I to join a fast-paced team responsible for threat detection and incident response across customer environments. The role emphasizes learning, collaboration, and communicating complex security concepts to non-technical audiences. You will monitor networks ...

Tier-1 customer-facing services, in partnership with Product and Engineering. Establish error budget policy and the enforcement mechanism when budgets burn. Design the incident command structure: severity rubric, declaration criteria, war-room protocol, stakeholder communication cadence, and the postmortem template. Train the first cohort of incident commanders … already in use) over net-new procurement. Define the instrumentation standards all new services must meet. Partner with the VP to migrate the interim incident response RACI — currently held by matrixed individuals across IT, Engineering, Support, and Enterprise Security — into a durable SRE-owned model. Establish ...

UBDS Group is seeking an experienced Cyber Incident Response Consultant to join our SIOC, based in London or Manchester. You will lead and perform digital forensics, investigations and incident response for complex customer environments, focusing on Microsoft and AWS and working with SIEM/EDR tooling. … will mentor junior staff, contribute to playbooks and runbooks, and help grow our managed services capability through evidence-based improvements and post-incident reviews. #J-18808-Ljbffr ...