26 to 50 of 123 Incident Response Jobs in the North West

Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies. Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: Cloud Infrastructure/Security. Endpoint Detection and Response. Perimeter detection … tooling. Investigating and responding to security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. About your Skills We’re open-minded when it comes ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

conversation around what flexibility could look like for you. The roles main functional responsibilities include: Management of a small team of technical specialists delivering Incident, Threat, Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security … externally sourced services. Implement (and maintain) clear UK owned processes and procedures as required for all aspects of Operational Security Through team, lead the response to UK impacting security incidents and personal data breaches, problem solve and co-ordinate across relevant teams to drive a rapid return ...

Incident Management Analyst Contract: 12 months Location: Chester Working Pattern Training Phase - First 2 Months Monday to Friday 7:00am - 4:00pm UK time Operational Shift Pattern Once fully operational, the role will operate on a rotating shift pattern: Shift A: Sunday to Thursday, 7:00am - 4:00pm Shift … Tuesday to Saturday, 7:00am - 4:00pm Role Overview We are seeking an experienced Incident Management Analyst to join a complex enterprise environment within the Financial Services sector. The successful candidate will be responsible for the end-to-end management of enterprise incidents, with a particular focus on major ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

platform security and intelligent automation. You will operate the AI security control plane, harden agentic systems across their lifecycle, and establish monitoring and response that makes agent behavior observable, safe and auditable. You will be empowered to take ownership from day one—designing secure patterns, building production-grade automations … decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats and control failures; lead or support triage, containment, eradication, recovery and post-incident improvement ...

readiness, and ongoing compliance monitoring. Assist with the identification, assessment, and documentation of security risks. Track remediation actions and follow up with control owners. Incident Response & Problem Support Support security incident response activities, including investigation and evidence gathering. Assist with root cause analysis and documentation … Experience Experience in an information security, IT risk, or IT operations role. Understanding of common cybersecurity risks, threats, and control types. Familiarity with incident management, risk assessment, and assurance activities. Ability to analyse information, identify issues, and document findings clearly. Strong written and verbal communication skills. Ability to manage ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access ...

# NMC Cyber Incident Responder (Digital Forensics)*Police Digital Service***Wigan, England**Hybrid · Senior · Full-time### The RoleWorking within a National Management Centre Cyber Incident Response team, the role involves leading investigations into ransomware, malware, unauthorised access and insider threat incidents affecting UK policing. … analysis of endpoints, servers and cloud environments, producing defensible findings for operational and legal audiences, and briefing Chief Officers and senior IT leaders throughout incident lifecycles.### Skills & ExperienceCandidates should have hands-on experience in enterprise digital forensic investigations, endpoint and memory forensics, and log analysis using EDR telemetry ...

# Major Incident Manager LeadManchesterApply for this job* Permanent* Experienced Professionals* Cloud Infrastructure Management* ID 493235-en\\_GB## **About the job you’re considering**An exciting opportunity to join Capgemini as a Major Incident Manager Lead, supporting a diverse portfolio of high-profile clients.In this role, you will … lead and oversee the end-to-end major incident management process, ensuring swift resolution and minimal business impact. You will be a confident decision-maker and analytical problem solver, thriving in high-pressure environments. As the primary point of contact during major incidents, you will coordinate cross-functional teams ...

operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities Act as the escalation point for all security … incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to i click apply for full job details ...

Amazon EU SARL (UK Branch) is seeking technical Security Engineers for AWS Security Incident Response to learn rapidly and work in teams to keep customers secure. You will lead security response, explain concepts to non-technical audiences, and operate with AWS technologies at scale. Responsibilities include threat … triage, incident handling, and collaboration with partner teams, with on-call duties and commitment to continual learning and improvement of security controls. #J-18808-Ljbffr ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

site. You will act as the trusted on-site point of contact for users, local teams and the central networks function, handling the full incident spectrum from single-user issues to major outages, resolving service requests within change governance, and delivering small in-region projects. What … doing: Provide network incident support across the full severity spectrum, from single-user connectivity issues to major and global outages, diagnosing, troubleshooting and resolving connectivity problems. Coordinate incident response across teams when multiple users or critical services are affected, keeping stakeholders informed and driving issues through ...

complex infrastructure and production issues, troubleshooting across containers, networking, databases, and more, identifying root causes and improving platform reliability. Improve monitoring, logging, alerting and incident response processes, introducing proactive observability, operational runbooks and stronger disaster recovery procedures. Drive infrastructure automation through Infrastructure-as-Code and CI/… using tools such as Terraform, CloudFormation, AWS CDK, Bitbucket Pipelines or GitHub Actions. Strong understanding of database performance, caching, asynchronous workloads and production incident response, with the ability to troubleshoot across infrastructure, application and data layers. #J-18808-Ljbffr ...

optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python development, API integrations, and automated incident response workflows. In addition to automation engineering, you are responsible for deploying, maintaining and continuously improving MXDR solutions for our customers. You assess customer … learning are essential. We are looking for someone with experience across MXDR technologies, as well as a solid understanding of security monitoring, detection engineering, incident response, and platform integrations. As a customer-facing professional, you should be confident engaging with stakeholders at all organisational levels, both remotely ...

Microsoft, Google, AWS & Endpoints, including Ransomware Cases. Backed by substantial VC Funding, & now looking to Scale-Up, their Customers include Big Four Consultancy, Global Incident Response Specialists & Cyber Insurers. They are ISO 27001 & Cyber Essentials Plus Certified & have recently won a high number of Awards throughout 2026. They … Work in Fluid, Fast Growth Environments & Seed-Stage Temperament: Comfortable with Ambiguity & Building Process "as you go" Ideally Hands-On DFIR, SOC or Incident Response Experience Ideally Experience with IR Organisations, Consultancies, MSSPs or Cyber Insurers. Ideally Built Onboarding, Health Scoring or Renewal Playbooks from scratch. Searches: Customer ...

Manager to take ownership of the organisation's cyber security capability, driving the next phase of security maturity. The role blends security operations, governance, incident response and stakeholder engagement within a small but growing function, with hybrid working and a competitive package. You will lead the cyber security … programme, mentor a Cyber Security Analyst, oversee monitoring and incident response, and work with senior #J-18808-Ljbffr ...

site in Merseyside with an initial on-site week and a requirement to be on site once a week thereafter. The position focuses on incident response, threat monitoring, and information governance, partnering with #J-18808-Ljbffr ...

privileged access, network segregation, hosting, monitoring, backup, recovery, patching and vulnerability remediation. Embed security in OT design, procurement, onboarding, change and supplier management. Coordinate incident detection, response, recovery and post-incident improvement for OT platforms. Manage OT suppliers and support agreements, ensuring service levels, controlled remote access … role-specific security screening required for access to critical operational environments. Participation in an on-call or standby rota and out-of-hours incident support, where required. Qualifications Degree-level qualification in information technology, engineering, telecommunications, cyber security or a related discipline, or equivalent substantial professional experience. Relevant professional ...

Security Incident Management Analyst (x3) Onsite in Inverness or Preston £450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi … security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership ...

Description: Job Title: Security Detection & Response Specialist Corporate Title: Up to Assistant Vice President Location: Chester Company Overview : At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth … rolling North Wales hills and the banks of the serene River Dee. Role Description: We are seeking a motivated and analytically driven Security Detection & Response Analyst (SDR) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service ...

into a clear, practical and measurable programme, bringing teams together around one ambition: enabling the business to move forward with confidence. From security operations, incident preparedness and vulnerability management to governance, third-party risk and security-by-design, you’ll balance protection with customer experience, resilience and commercial priorities. … delivering our information security strategy and multi-year roadmap Embedding security-by-design across Architecture, Engineering, Product and Change Strengthening security monitoring, detection, response and incident preparedness Turning emerging threats and vulnerabilities into clear, prioritised action Giving senior leaders meaningful insight into cyber risk and business choices Strengthening ...