22 of 22 Permanent Incident Response Jobs in Yorkshire

technical cyber security professional with hands-on capability, sound judgement and a practical approach to problem solving. Technical: Strong experience in cyber security operations, incident response or threat detection roles Proven experience working with Microsoft Sentinel (SIEM) in a production environment Good working knowledge of Microsoft Security Copilot … agentic tooling) experience in cloud security, particularly across Azure environments Strong understanding of detection engineering, alert tuning and investigation workflows experience developing and maintaining incident response processes and playbooks Good understanding of security frameworks, controls and governance experience : experience working within a cyber security, security operations or incident ...

environment? This is a fantastic opportunity for someone at the beginning of their cyber security career to gain hands-on experience in security monitoring, incident investigation and incident response, while developing their technical skills alongside experienced security professionals. Responsibilities Monitor and investigate security alerts and incidents. Perform … incident triage and escalate where appropriate. Support incident response and threat intelligence activities. Work closely with senior analysts during security investigations. Contribute to the ongoing improvement of SOC processes and detection capabilities. Requirements Previous experience working within a Security Operations Centre (SOC). Ideally around ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

large-scale security capabilities that protect the UK’s largest digital bank.You’ll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high-performing team, you’ll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat-led approach to defence, and help shape a world-class security operation that enables the Group to go faster, safely.Why Join us If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing ...

fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid The opportunity SIEM … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with the Endpoint ...

mitigate any risk. You will also be expected to maintain an awareness of the changing threat landscape and industry standards. Proactively work with Incident Response and Engineering to identify tactics and techniques used by threats actors and opportunities to improve the security of our environment. Propose and support … exercises. Ensure all relevant vulnerabilities are correctly triaged, risk assessed, logged and assigned to remediation teams. Support remediation teams with remediation strategies. Assist Incident Response team with the investigation and resolution of Security Incidents when required. Create and maintain operation procedures, configuration and technical documentation to a high ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination – You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams … including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation – You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions ...

effort, improve consistency and strengthen service resilience.Partner with engineering, platform and product teams to deliver and continuously improve cloud solutions and security data platforms.Lead incident response, problem investigations and root cause analysis activities, ensuring learning is converted into measurable improvements.Develop and enhance observability, monitoring and alerting capabilities that ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

best practices, including IAM design, logging/monitoring, network security controls and workload security. Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience. Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) Networking & Edge ...

/or lead complex, cross-team initiatives and provide technical clarity in ambiguous problem spaces Improve operational excellence through observability, automation, and incident response. Mentor engineers and participate in on-call rotations What You Bring 8+ years of experience in platform, infrastructure, DevOps, or software engineering Proficiency with Python ...

role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security … initiatives and stay ahead of emerging threats, including AI and automated attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools ...

Responsibilities Lead the organisation's cyber security, information security and compliance programmes. Develop, implement and enforce security, data protection and governance policies. Manage cyber incident response processes, ensuring effective detection, investigation and remediation of security events. Conduct risk assessments, vulnerability reviews, audits and gap analyses to identify ...

will be in the office 3 days a week. What you'll bring: A minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvement Solid working knowledge of SIEM, EDR, and vulnerability management platforms Comfort using AI tools (Claude ...

translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards as AI technologies evolve.This is a role ...

enhancing cyber security, information security, data privacy and compliance programmes, helping protect critical digital assets and systems. You'll lead on cyber risk, incident response, regulatory compliance, audits, security frameworks and continuous improvement , while managing and developing an Information Security team. We're looking for: Proven experience leading ...

Cyber Unit and drive assurance across the health and care system. You will shape strategy, policy and standards and oversee risk management, governance and incident response with senior stakeholders. The role requires extensive NHS/public sector leadership experience, strong cyber security knowledge and the ability to manage ...