1 to 25 of 38 Remote/Hybrid Incident Response Jobs in Manchester

responds, and mitigates cybersecurity risk, protecting EY and client data, and our information management systems. The opportunity The Cyber & Investigative Services (CIS) Senior Cyber Incident Response Coordinator will exercise exemplary incident management techniques to coordinate incident response to cybersecurity events or incidents stemming from suspected … threats on a global scale. Candidates for the role must have an exceptional comprehension of cybersecurity incident response plans and coordination of activities, establish and foster relationships on a global scale, and have superb verbal and written communication skills. Additionally, candidates must have a sense of diplomacy, ability ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to identify, contain and investigate sophisticated cyber threats across traditional, hybrid and cloud-hosted environments. You will investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance. This team is building toward an AI-augmented … expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want ...

technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including … high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

readiness, and ongoing compliance monitoring. Assist with the identification, assessment, and documentation of security risks. Track remediation actions and follow up with control owners. Incident Response & Problem Support Support security incident response activities, including investigation and evidence gathering. Assist with root cause analysis and documentation … Experience Experience in an information security, IT risk, or IT operations role. Understanding of common cybersecurity risks, threats, and control types. Familiarity with incident management, risk assessment, and assurance activities. Ability to analyse information, identify issues, and document findings clearly. Strong written and verbal communication skills. Ability to manage ...

mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

into a clear, practical and measurable programme, bringing teams together around one ambition: enabling the business to move forward with confidence. From security operations, incident preparedness and vulnerability management to governance, third-party risk and security-by-design, you’ll balance protection with customer experience, resilience and commercial priorities. … delivering our information security strategy and multi-year roadmap Embedding security-by-design across Architecture, Engineering, Product and Change Strengthening security monitoring, detection, response and incident preparedness Turning emerging threats and vulnerabilities into clear, prioritised action Giving senior leaders meaningful insight into cyber risk and business choices Strengthening ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

. As a member of the Starling SOC team, you will protect customers, assets and systems using the latest tech, with a focus on incident triage, response, investigations and threat hunting in a fast-paced fintech environment. #J-18808-Ljbffr ...

alerting integrations, workbooks and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. Implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber … Architecture. Work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. Support the engineering and continuous improvement of security controls for end users, Azure workloads, cloud services, identities, workloads and non-human or agent identities. Integrate security ...

code. Build CI/CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices and reviews that turn production issues into lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection … Experience with Terraform or comparable infrastructure-as-code tools. Knowledge of Docker, Kubernetes and CI/CD tooling. A solid understanding of observability and incident management. Strong cloud security knowledge and an understanding of operating within a regulated environment. An automation-first approach and confidence taking ownership ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise these via the appropriate … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

automation Manage Azure Key Vault, secrets, and certificate lifecycle processes Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, cloud operations, or managed services …/or ARM templates Azure DevOps and CI/CD pipeline experience Scripting and automation experience using Bash and/or PowerShell Strong troubleshooting, incident management, and problem-solving skills Why Join? Work with modern cloud, automation, and DevOps technologies Play a key role in driving Infrastructure-as-Code ...

provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defence. Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives. Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

network resilience. Experience managing and challenging MSPs and third-party suppliers. A hands-on background in security, patching, vulnerability management, disaster recovery and incident response. Experience operating within regulated or well-governed environments, ideally aligned to ISO 27001 or Cyber Essentials. The ability to communicate technical concepts and risk ...

network resilience. Experience managing and challenging MSPs and third-party suppliers. A hands-on background in security, patching, vulnerability management, disaster recovery and incident response. Experience operating within regulated or well-governed environments, ideally aligned to ISO 27001 or Cyber Essentials. The ability to communicate technical concepts and risk ...