1 to 25 of 32 Remote/Hybrid Incident Response Jobs in the North West

security operations, expanding our offensive security capabilities, and improving how we detect and respond to emerging threats. Working across security engineering, threat intelligence, incident response, and cloud security, you will identify opportunities to improve detection, automate processes, mature security technologies, and strengthen our overall security posture. This … Security Operations and technology teams to drive continuous improvement. Work across the full spectrum of modern cybersecurity. From security engineering and cloud security to incident response, threat intelligence, automation, and offensive security, this role offers technical breadth. You will solve complex security challenges, improve detection and response ...

define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence … guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

compliance Collaborate with developers to improve CI/CD pipelines, deployment strategies, and overall developer experience Enhance observability and reliability, refining alerting, monitoring, and incident response Collaborate on cloud optimization projects, improving performance, cost efficiency, and security posture Mentor and guide team members, fostering a culture of technical … compliance Collaborate with developers to improve CI/CD pipelines, deployment strategies, and overall developer experience Enhance observability and reliability, refining alerting, monitoring, and incident response Collaborate on cloud optimization projects, improving performance, cost efficiency, and security posture Mentor and guide team members, fostering a culture of technical ...

highly available cloud services. Support business stakeholders in adopting modern cloud-native architectures and security best practices. Develop and implement automation for security monitoring, incident response, remediation, and operational processes. Ensure cloud platforms comply with organisational security standards, governance requirements, and software development lifecycle practices. Identify, assess … gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions to standardise and automate cloud ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

Model & Ways of Working**: Define and implement SRE ways of working and engagement patterns, aligning reliability practices with existing ITSM/ITIL processes (e.g., incident, problem, release and change) and modern engineering delivery.* **Reliability Measures (SLIs/SLOs) & Error Budgets**: Establish service measures and targets (SLIs/SLOs … Insight:** Shape observability approaches (metrics/logs/traces) and operational monitoring models that make reliability risks visible and actionable, improving operational decision-making.* **Incident Excellence & Continuous Learning:** Design incident analysis and improvement loops, including practical approaches that strengthen incident response and drive learning through post ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...

Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … edge technology and a strong set of processes. The NMC Cyber Detect Analysts will work closely with teams across the NMC, typically with the Incident Response Teams to ensure security issues are addressed quickly upon discovery. NMC Cyber Detect Analyst duties involve but are not limited to: Initial ...

including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical ...

design, architecture and delivery of advanced security automation solutions across enterprise environments. As the technical authority for SOAR engineering, you will work closely with Incident Response, Security Operations and Engineering teams to define automation strategy, develop scalable playbooks and drive continuous improvements in cyber defence capabilities. This … design and architecture of enterprise-scale SOAR solutions using the Splunk platform. Define automation strategy and identify opportunities to improve detection, investigation and response capabilities. Design, develop and optimise advanced SOAR playbooks and automated workflows. Act as the technical authority for security automation, orchestration and analytics. Produce system analytics ...

Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective … liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload ...

Gateway, CloudWatch)Own both application code and infrastructure (Infrastructure as Code, e.g., Terraform)Design and maintain CI/CD pipelines for reliable deploymentsSupport incident response and continuous reliability improvementsMentorship & Team EnablementProvide technical mentorship and architectural guidanceSupport hiring and onboarding of engineersEncourage thoughtful adoption of AI-assisted development toolsKey ...

scalability, performance and security Responding to production incidents, diagnosing complex technical issues and restoring services Carrying out root cause analysis and contributing to post-incident reviews Building automation to reduce manual and repetitive operational tasks Using Infrastructure as Code to improve the consistency and scalability of environments Working closely … solid background within Site Reliability Engineering, DevOps, Platform Engineering or a similar environment Terraform and Infrastructure as Code experience Strong production troubleshooting and incident response experience Experience supporting highly available production environments A strong understanding of reliability, scalability and automation Experience with scripting or programming, ideally PowerShell ...

cutting-edge technologies and contribute to the stability and performance of their network infrastructure. Key Responsibilities: Monitoring and Management: Oversee Monitoring Event Management and Incident Management, ensuring timely Level 1 triage of networking issues. Network Operations: Provide operational support for network environments, including switching, routing, perimeter security, traffic management … advanced tools such as Splunk, SevOne, IBM Watson AI Ops, Wireshark, NetScout, and Gigamon to identify service impacts and interpret monitors, dashboards, and logs. Incident Response: React effectively to production failures, managing triage efforts, engaging appropriate teams, and communicating with management and technical escalation. Documentation and Reporting: Maintain ...

training interventions. Conduct regular reviews, risk assessments, and assurance activities to evaluate the effectiveness of human ‐ risk mitigations and recommend improvements. Cross ‐ Functional Collaboration & Incident Learnings Work closely with IT, HR, Operational Resilience, Governance and other relevant teams to embed human factors into security initiatives and organisational change. Partner … with incident response teams to analyse human ‐ related contributors to incidents and ensure lessons learned are translated into sustainable behavioural improvements. Participate in cross ‐ functional projects to ensure human ‐ centric security requirements are addressed from design through to adoption. Skills and Experience Bachelor's degree in cybersecurity, psychology ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

HR. System Ownership & Architecture: Maintain end-to-end service health, lead deployment/operations, reduce system risks via clear documentation, and guide technical architecture. Incident Management & Quality: Oversee live production incident response, conduct postmortems, maintain high code standards, and participate in on-call rotations as needed. Continuous ...

access, policy enforcement, auditability and data protection. Own the reliability and operational excellence of the agentic platform, including CI/CD, cloud infrastructure, monitoring, incident response and production support. Collaborate with Engineering, Security, Architecture, Data and Risk teams to define standards, document best practices and support adoption … audit trails. Experience observing and operating LLM or agent workloads in production, including tracing, prompt/model/tool versioning, regression monitoring and incident response. Strong AWS and cloud-native engineering experience, including Infrastructure as Code, containers or serverless services, networking, IAM and monitoring. Experience with CI/ ...

commercial agreements, including complex IT, cloud services, digital transformation, cybersecurity and product security arrangements within the company's risk tolerance Advising on cybersecurity governance, incident response preparedness, regulatory notification and disclosure requirements across multiple jurisdictions, as part of an enterprise governance framework appropriate for a US publicly traded ...

First Automation & Intelligent Tooling Define and lead an AI-first automation roadmap for Engineering Infrastructure and Enterprise Tooling (e.g., reducing waste, accelerating reviews, improving incident response, increasing release confidence).Architect and ship AI/LLM-enabled workflow automation across the SDLC (e.g. risk assessment, automated build, test … change-impact analysis, auto-triage of build/test failures).Establish policies and guardrails for AI usage in internal tools: data handling, prompt/response logging, model/provider selection, evaluation, fallback behaviors, and abuse prevention.Dev Productivity & Enterprise Tooling (Global Scale)Set technical direction and standards for the globally ...

recovery and continuity frameworks across the organisation. You'll partner with both technical teams and operational stakeholders to enhance the company's readiness and response to disruptive cyber events. The Cyber Resilience Analyst will assess critical services and infrastructure to determine business impact and recovery priorities, support structured incident … ensure resilience considerations are factored into technology and change initiatives from the outset. Essential Skills: Experience in Cyber Resilience (Business Continuity, Disaster Recovery or Incident Response)Ability to manage detailed plans and work across complex environmentsExcellent communication and stakeholder management capabilityGood understanding of enterprise IT systems and infrastructureStrong ...