12 of 12 Incident Response Jobs in Leeds

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid The opportunity SIEM … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with the Endpoint ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination – You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams … including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation – You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

alignment with security policies Contribute to cloud cost monitoring and optimization efforts Maintain documentation, runbooks, and operational procedures Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers Amazon ECS (Elastic Container Service) Amazon EC2 Amazon ECR (Elastic Container Registry) AWS Lambda ...

/or lead complex, cross-team initiatives and provide technical clarity in ambiguous problem spaces Improve operational excellence through observability, automation, and incident response. Mentor engineers and participate in on-call rotations What You Bring 8+ years of experience in platform, infrastructure, DevOps, or software engineering Proficiency with Python ...

role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security … initiatives and stay ahead of emerging threats, including AI and automated attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools ...

will be in the office 3 days a week. What you'll bring: A minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvement Solid working knowledge of SIEM, EDR, and vulnerability management platforms Comfort using AI tools (Claude ...

will be in the office 3 days a week. What you'll bring: A minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvementSolid working knowledge of SIEM, EDR, and vulnerability management platformsComfort using AI tools (Claude, Copilot, ChatGPT ...

Cyber Unit and drive assurance across the health and care system. You will shape strategy, policy and standards and oversee risk management, governance and incident response with senior stakeholders. The role requires extensive NHS/public sector leadership experience, strong cyber security knowledge and the ability to manage ...