25 of 25 Remote/Hybrid Incident Response Jobs in Manchester

security operations, expanding our offensive security capabilities, and improving how we detect and respond to emerging threats. Working across security engineering, threat intelligence, incident response, and cloud security, you will identify opportunities to improve detection, automate processes, mature security technologies, and strengthen our overall security posture. This … Security Operations and technology teams to drive continuous improvement. Work across the full spectrum of modern cybersecurity. From security engineering and cloud security to incident response, threat intelligence, automation, and offensive security, this role offers technical breadth. You will solve complex security challenges, improve detection and response ...

define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence … guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

compliance Collaborate with developers to improve CI/CD pipelines, deployment strategies, and overall developer experience Enhance observability and reliability, refining alerting, monitoring, and incident response Collaborate on cloud optimization projects, improving performance, cost efficiency, and security posture Mentor and guide team members, fostering a culture of technical … compliance Collaborate with developers to improve CI/CD pipelines, deployment strategies, and overall developer experience Enhance observability and reliability, refining alerting, monitoring, and incident response Collaborate on cloud optimization projects, improving performance, cost efficiency, and security posture Mentor and guide team members, fostering a culture of technical ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

Model & Ways of Working**: Define and implement SRE ways of working and engagement patterns, aligning reliability practices with existing ITSM/ITIL processes (e.g., incident, problem, release and change) and modern engineering delivery.* **Reliability Measures (SLIs/SLOs) & Error Budgets**: Establish service measures and targets (SLIs/SLOs … Insight:** Shape observability approaches (metrics/logs/traces) and operational monitoring models that make reliability risks visible and actionable, improving operational decision-making.* **Incident Excellence & Continuous Learning:** Design incident analysis and improvement loops, including practical approaches that strengthen incident response and drive learning through post ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...

Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … edge technology and a strong set of processes. The NMC Cyber Detect Analysts will work closely with teams across the NMC, typically with the Incident Response Teams to ensure security issues are addressed quickly upon discovery. NMC Cyber Detect Analyst duties involve but are not limited to: Initial ...

design, architecture and delivery of advanced security automation solutions across enterprise environments. As the technical authority for SOAR engineering, you will work closely with Incident Response, Security Operations and Engineering teams to define automation strategy, develop scalable playbooks and drive continuous improvements in cyber defence capabilities. This … design and architecture of enterprise-scale SOAR solutions using the Splunk platform. Define automation strategy and identify opportunities to improve detection, investigation and response capabilities. Design, develop and optimise advanced SOAR playbooks and automated workflows. Act as the technical authority for security automation, orchestration and analytics. Produce system analytics ...

Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective … liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload ...

Gateway, CloudWatch)Own both application code and infrastructure (Infrastructure as Code, e.g., Terraform)Design and maintain CI/CD pipelines for reliable deploymentsSupport incident response and continuous reliability improvementsMentorship & Team EnablementProvide technical mentorship and architectural guidanceSupport hiring and onboarding of engineersEncourage thoughtful adoption of AI-assisted development toolsKey ...

scalability, performance and security Responding to production incidents, diagnosing complex technical issues and restoring services Carrying out root cause analysis and contributing to post-incident reviews Building automation to reduce manual and repetitive operational tasks Using Infrastructure as Code to improve the consistency and scalability of environments Working closely … solid background within Site Reliability Engineering, DevOps, Platform Engineering or a similar environment Terraform and Infrastructure as Code experience Strong production troubleshooting and incident response experience Experience supporting highly available production environments A strong understanding of reliability, scalability and automation Experience with scripting or programming, ideally PowerShell ...

training interventions. Conduct regular reviews, risk assessments, and assurance activities to evaluate the effectiveness of human ‐ risk mitigations and recommend improvements. Cross ‐ Functional Collaboration & Incident Learnings Work closely with IT, HR, Operational Resilience, Governance and other relevant teams to embed human factors into security initiatives and organisational change. Partner … with incident response teams to analyse human ‐ related contributors to incidents and ensure lessons learned are translated into sustainable behavioural improvements. Participate in cross ‐ functional projects to ensure human ‐ centric security requirements are addressed from design through to adoption. Skills and Experience Bachelor's degree in cybersecurity, psychology ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

access, policy enforcement, auditability and data protection. Own the reliability and operational excellence of the agentic platform, including CI/CD, cloud infrastructure, monitoring, incident response and production support. Collaborate with Engineering, Security, Architecture, Data and Risk teams to define standards, document best practices and support adoption … audit trails. Experience observing and operating LLM or agent workloads in production, including tracing, prompt/model/tool versioning, regression monitoring and incident response. Strong AWS and cloud-native engineering experience, including Infrastructure as Code, containers or serverless services, networking, IAM and monitoring. Experience with CI/ ...

First Automation & Intelligent Tooling Define and lead an AI-first automation roadmap for Engineering Infrastructure and Enterprise Tooling (e.g., reducing waste, accelerating reviews, improving incident response, increasing release confidence).Architect and ship AI/LLM-enabled workflow automation across the SDLC (e.g. risk assessment, automated build, test … change-impact analysis, auto-triage of build/test failures).Establish policies and guardrails for AI usage in internal tools: data handling, prompt/response logging, model/provider selection, evaluation, fallback behaviors, and abuse prevention.Dev Productivity & Enterprise Tooling (Global Scale)Set technical direction and standards for the globally ...

Familiarity with emerging technologies, including AI, digital risk frameworks and associated regulatory challenges. Demonstrable experience supervising, mentoring and developing junior lawyers. Experience in cyber incident response and data‐breach management. Strong commercial awareness, sound judgement and leadership capability. Confident, personable and effective in managing stakeholders at all levels. ...

product managers, engineers, designers, data specialists or UX writers. Experience with consumer-facing pricing, promotions, ranking, personalisation or choice architecture. Experience supporting regulatory implementation, incident response, disputes or external counsel. Experience creating legal guidance, training, FAQs or playbooks. Familiarity with Jira, legal intake processes, workflow tools ...

lifecycle activities Support and remediate Veeam backup and recovery operations Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, ideally within managed services Strong … Experience supporting enterprise backup technologies such as Veeam Knowledge of WSUS, SCCM, and patch compliance processes PowerShell scripting and automation experience Strong troubleshooting and incident management skills Why Join? Work with modern Azure, VMware, Windows, and enterprise backup technologies Take ownership of critical infrastructure services and large-scale patching ...

lead design, architecture and delivery of advanced security automation solutions across enterprise environments. You will be the technical authority for SOAR engineering, partnering with Incident Response, SOC and Engineering teams to define automation strategy and drive improvements. This is a remote-first role with occasional travel to customer ...

code reviews. Strong technical documentation skills. Deep understanding of large‐scale, highly available, multiuser, service‐based systems. Familiarity with on‐call rotations and incident response. What you will be doing Act as a point of escalation for the team both in and out of office hours. Lead the development ...