1 to 25 of 28 Incident Response Jobs in the Midlands

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

stays hands-on. You'll manage a team of Information Security professionals and a group of security vendor partners. You'll drive improvements in incident response, cyber resilience, governance, risk management and security awareness. The role is highly visible, and you'll work closely with senior stakeholders … capability Managing, coaching and developing a team of Information Security professionals Managing security vendor partners and making sure they deliver Owning and improving security incident response, including communications and recovery Leading security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you'll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … through technology. You will be responsible for Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security-related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed ...

Manage and coach a small team of Information Security professionals. Manage and drive effective performance of multiple security vendor partners. Own and enhance security incident response processes and recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including … will need: Proven experience leading a Cyber Security, Cyber Defence or Information Security function within a complex organisation. Strong knowledge of security operations, incident response, risk management and security governance. Experience developing and implementing security policies, controls and security improvement programmes. Excellent stakeholder management and communication skills, with ...

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...

embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers. Responsibilities Maintain and improve security … system owners and confirm that corrective actions are effective. Investigate security alerts and incidents, coordinating with internal teams and external security specialists. Maintain practical incident-response procedures, escalation routes and supporting documentation. Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable ...

capabilities across a range of technical environments. You will play a key role in designing, implementing and maintaining security solutions, proactively identifying risks, supporting incident detection and response, and ensuring compliance with recognised security standards and best practices. Key Responsibilities Design, implement and maintain security tools, systems … using tools and frameworks such as CIS Benchmarks. Identify vulnerabilities, assess risks and support the implementation of effective remediation measures. Contribute to security monitoring, incident detection, response and threat intelligence activities. Skills and Experience The ideal candidate will have experience in several of the following areas: Strong understanding ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

alerts/incidents across a wide range of security tools. Lead the design, development, and engineer new content (playbooks) across security orchestration and response (SOAR) and security information and event management (SIEM) platforms to meet the organisation's strategic objectives and goals Assist with managing the Engineering backlog including … enact improvements to the service Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure ...

controls. Work closely with infrastructure, cloud and engineering teams to embed security best practices. Support security governance, compliance and risk management activities. Contribute to incident response and security investigations where required. Help develop and improve security standards, procedures and controls. Skills & Experience Proven experience in a Cloud Security ...

part. Alongside that, you'll have a solid background in information or cyber security and experience across some of the following: Security Operations/incident response SIEM and EDR Identity and Access Management MFA and Conditional Access Vulnerability management Security controls and technical assurance Security reporting and metrics ...

cyber security strategy, identifying priorities and driving improvements. Manage the relationship with the external Security Operations Centre, reviewing service effectiveness and coordinating investigations and incident response. Monitor emerging threats, technologies and regulatory developments to understand their potential impact. Develop AI governance, controls and guidance to support the safe adoption … delivering improvements. Experience managing an external SOC or security service provider. Practical knowledge of Microsoft Defender and Microsoft Sentinel. An understanding of cloud security, incident response and vulnerability management. An interest in AI governance, including how to assess risks and establish proportionate controls. The confidence to deliver presentations ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner ...

execution, and completion of IT projects (e.g. system upgrades, software implementations) Proficiency in cybersecurity practices, including implementing security policies, conducting risk assessments, and managing incident response Experience with networking technologies (firewalls, VPNs, switches, routers) and troubleshooting complex network issues Strong knowledge of systems and database administration Experience ...