1 to 25 of 57 Permanent Incident Response Jobs in Yorkshire

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

timely and proactive escalation of potential events/items of interest. The role will include access control, application and development, risk management, operational security, incident response, business continuity, operational and physical security of systems, as well as ongoing user training and reporting requirements. Primary responsibilities include: Monitor, investigate … with Detection and Automation team to support development of detection alerts, security automation and recommendations for tuning of rules to reduce false positives Support incident investigation, containment, eradication, and recovery activities while maintaining accurate documentation, and contributing to the continuous improvement of detection capabilities, playbooks, and operational processes Respond ...

operations, partners, service levels and governance into a clear global operating model. Strengthen identity, device, access, data protection, security testing, incident response and business continuity controls. Improve integration, adoption and training across core business systems, telephony, call-centre and clinical support platforms. Establish proportionate governance for AI, enterprise … strategy, infrastructure, cloud services, end-user support, device management and service performance. Own cyber security strategy, identity and access management, vulnerability management, penetration testing, incident response and security awareness. Maintain IT policies, procedures, acceptable-use and content controls, and the evidence required for audit or inspection. Lead business ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Technical Incident Commander Department: 61-458 - Technology - Live Operations Employment Type: Permanent - Full Time Location: UK - Leeds Reporting To: Adam De Silva Description Why Join DAZN? DAZN is one of the world’s leading sports streaming platforms, delivering live and on-demand content to millions of fans across … globe. In an always-on environment, service continuity is critical. As a Technical Incident Manager, you’ll be at the forefront of restoring services when issues arise, owning the process of critical incident response across our global tech infrastructure. This is your opportunity to directly influence ...

Risk and Control Assessment: Identify security risks, vulnerabilities, control gaps and emerging threats within assigned workstreams, supporting proportionate remediation, escalation and risk treatment activity. Incident Response: Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder updates, reporting and escalation. Compliance … activity, proposing recommendations where necessary. Workstream and Control Support: Support Information Security activity where it relates to assigned workstreams, user and data security controls, incident response, control operation, evidence, reporting, policy compliance, remediation or escalation. Threat Awareness and Continuous Improvement: Maintain awareness of emerging cyber security threats, technology ...

Authentication, develop Conditional Access and Privileged Access Management controls, and support secure user lifecycle and access management. Develop, implement, and maintain the Club's Incident Response Plan, support Business Continuity and Disaster Recovery planning, participate in testing and exercising cyber response procedures, and investigate and respond … including VLANs, firewalls, IDS/IPS, and segmentation. Experience using vulnerability management tools such as Nessus, Qualys, or similar. Experience developing or contributing to incident response processes. Experience conducting technical security assessments and risk reviews. Preferred Skills Experience within sport, entertainment, stadium, or public venue environments. Experience implementing ...

audiences. Influence technical decisions whilst balancing security, resilience and delivery outcomes. Essential Skills & Experience Strong background within Security Architecture, Cyber Security Engineering, Security Operations, Incident Response, Infrastructure Architecture, Network Architecture or a related technical security discipline. Excellent understanding of networking fundamentals, protocols, infrastructure design and security architecture principles. … Particularly Relevant Backgrounds The hiring team is particularly interested in candidates who have progressed into security from technical disciplines such as: Security Operations (SOC) Incident Response Penetration Testing Infrastructure Engineering Systems Administration Network Engineering or Network Architecture Candidates from government and other highly regulated environments are often well ...

root cause analysis, and implementation of corrective actions to maintain service reliability and security. Required Skills: 5+ years in Security Operations/SOC or Incident Response, including in a 24 7 or global environment. Proven experience across incident response, alert triage, threat hunting, data loss prevention ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

security monitoring framework for Felix. Act as technical lead for security incidents, from investigation and containment through to recovery and lessons learned, and maintain incident response playbooks. Run vulnerability management, including patching and the remediation of findings from penetration tests. Run security awareness activity, including phishing simulations … bring: Strong, hands‐on experience of a cloud‐based Microsoft 365 environment and its security tools. A strong security background, including Cyber Essentials, security incident response and vulnerability management. Practical experience of looking after Windows and Android devices across multiple sites. Experience of leading a small technical team ...

risk and control framework aligned to enterprise risk strategy and regulatory requirements Establish policies and procedures across technology risk and control including disaster recovery, incident response and risk and security awareness training Identify and assess technology risks across information security, infrastructure, applications and vendor management Implement risk mitigation … Bring substantial experience building and running technology risk and control frameworks in a regulated environment Demonstrate experience shaping policies and procedures for disaster recovery, incident response and security and risk awareness Show proven capability identifying and assessing technology risks across information security, infrastructure, applications and third-party providers ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least ...

third-party SOC vendor. Triage, analyse and prioritise alerts, incidents, escalations, and investigations - validating severity, business impact, and regulatory implications of incidents Co-ordinate incident management and response activities aligned with defined policies, standards, and framework requirements by being the internal response facilitator and co-ordinator … operations. Skills, Qualifications, And Experience Previous hands-on experience in cybersecurity operations or security engineering roles. Experience of security monitoring, threat detection, incident response, and threat hunting methodologies. Strong working knowledge of endpoint security, identity and access management, authentication controls, privileged access management, and security hardening standards incl. ...

compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic improvement. Support disaster recovery testing to validate recovery plans … integrating AI or agentic tooling into engineering workflows (e.g. IaC generation, automated remediation, or documentation). Exposure to compliance‐evidence or governance tooling and incident‐management tooling. Additional Information This is a hybrid role, with attendance at our Leeds office once a month. Participation in the on‐call rota ...

improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation. Key Responsibilities Manage and enhance Microsoft security, compliance and data protection … access control (RBAC), access reviews and Joiner-Mover-Leaver processes. Identify security risks, vulnerabilities and control gaps, driving remediation activity where required. Support security incident investigations, coordination, reporting and escalation. Assist with audits, compliance activities and the maintenance of security control evidence. Produce meaningful security reporting and insights ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

rotations, certificate renewals and infrastructure upgrades Contribute to the management and resolution of complex L2/L3 incidents Conduct root cause analysis and post-incident investigations Maintain and update runbooks and operational documentation Participate in an on-call rota, including out-of-hours incident response Mentor … infrastructure-as-code technologies such as Terraform Solid understanding of ITIL practices Experience supporting and operating production systems within an on-call environment, including incident triage, technical investigation, remediation and post-incident review. Experience implementing and deploying production changes in business-critical environments. Strong troubleshooting and root-cause ...

Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk assessments and support audit and compliance activities. Drive improvements in data security, governance, and cyber … with ISO27001 principles and broader governance or quality frameworks such as ISO9001. Experience with backup, disaster recovery, and business continuity planning. Strong troubleshooting and incident management capability. Experience managing third‐party suppliers and service providers. Excellent communication, stakeholder management, and relationship‐building skills. Ambition and capability to progress toward ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise problems. Monitoring and gathering … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

practices. Monitor security risks and implement appropriate controls. Manage user access, permissions and identity management. Ensure compliance with relevant legislation and organisational policies. Coordinate incident response and recovery. Service Delivery Ensure timely and effective resolution of IT issues. Monitor service desk performance and user satisfaction. Escalate and manage … self-confident. Microsoft certifications. Experience with ERP or line-of-business systems Pipedrive, Sage, RAPS and Procore). Key Performance Indicators (KPIs) Service desk response and resolution times. Cyber security compliance. Successful delivery of IT projects. Budget adherence. Team performance and development. Reduction in recurring IT incidents. Authority ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) Networking & Edge ...