1 to 25 of 236 Incident Response Jobs in the North of England

Salary100000 - 110000LocationLondon, UKContractPermanentIndustryTransformation & Change ManagementContactDamian ShawDamian. Shaw@oliverjames.com Senior Manager/Associate Director – Cyber Incident Response Advisory & Incident ManagementThis is a senior opportunity within a leading Cyber Risk & Security practice, working with major organisations to strengthen their ability to prepare for, manage and recover from complex cyber … incidents. The role sits across both proactive cyber incident response advisory and live incident management, helping clients improve resilience while supporting them through high-impact security events. You will work closely with senior stakeholders and C-suite leaders, advising on cyber incident preparedness, crisis and incident ...

Security Engineer I, AWS Security Incident Response AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious … activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities Respond to threat findings that indicate unauthorized activity has occurred Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. Contribute to the development of security ...

enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain … enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain ...

green and healthy future for all. Find out more about DDTS: Defra digital, data and technology blog LinkedIn Defra Jobs The Head of Security Incident and Response provides operational leadership of the Defra Group Security Incident Response Management (SIRM) capability, ensuring the organisation is prepared … able to respond effectively to, security incidents ranging from routine events to significant security incidents. As the senior lead for security incident management, the role oversees incident response policy, governance and operational coordination, directs the response to complex and high-impact incidents, and provides authoritative advice ...

Security Incident Management Analyst Location: Inverness or Preston | 5 days onsite Duration: 5 months possible extension Pay rate: up to £575 per day umbrella Clearance: Active SC clearance/UK sole national Role Description: The Security Incident Management Analyst operates within the Operational Integrator (OI) function … multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers. The role assists in ensuring security incidents are identified, tracked, escalated, and reported in accordance with client policies and agreed service levels. Working closely with suppliers, service management teams, and security stakeholders ...

Business Resilience function works across practice groups, Business Services teams and international offices to strengthen preparedness, protect critical services and enable an effective response to disruption. This role reports to the Head of Risk Management and partners closely with IT, Information Security and senior business leaders. About the role … services, people, locations, technology, suppliers and the external threat environment. A central feature of the role is close partnership with IT as technology incident response, cyber response and disaster recovery capabilities mature. You will align business and technology recovery assumptions, design a structured operational and executive exercising ...

What you will be doing Conduct in-depth investigations of malicious incidents or complex alerts escalated by analysts. Mentoring and training analysts. Assist in incident response and post-incident reviews. Prioritising and managing workload effectively, managing several open Incidents and requests whilst following existing procedures and best … Microsoft Sentinel, and Microsoft XDR A willingness to learn and good attention to detail. Experience in conducting security investigations and triaging alerts. Familiarity with incident response and post-incident reviews. Understanding of threat intelligence and its integration into operations. Strong communication skills for handling customer calls ...

Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. Key ResponsibilitiesCloud Security Assessment & Advisory: Assess … Azure IaaS and Google Cloud environments, including infrastructure. Provide recommendations based on industry best practices and emerging security threats. The ability to provide Cyber Incident Responders subject matter expertise in Cloud security when required. Defender & Security Monitoring Advisory: Evaluate and optimise the use of Azure Defender and other security ...

capability/controls, with ongoing maturity assessments Conduct security due diligence assessments on any new/changed IS services impacting the business Conduct Cyber Incident Response testing in collaboration with team Support cyber incident response/investigations Oversee service provisioning and hosting of internal LoB apps …/release management Maintain apps (including SAP) build/support documentation (including Service Catalogue), drawing on outsourced providers Provide Master Data Management Handle major incident response (Apps, including SAP) Manage outsourced Apps support contract performance/resources, directing and supervising as required Act as the "glue" to connect ...

Bell’s customers, data, critical services and the trust placed in the firm. Security Monitoring & Detection Engineering provides an integrated monitoring, detection and response capability, combining internal technical expertise with 24x7 support from the Managed Security Service Provider. The Security Monitoring & Detection Engineering Lead is the principal technical authority … Security Monitoring & Detection Engineering capability, accountable for the effectiveness of security monitoring, detection engineering, technical investigation and incident response. This is a hands‐on technical role responsible for the architecture, engineering and operational performance of Microsoft Sentinel and the wider security monitoring estate. The role would particularly suit ...

infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including … high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks ...

timely and proactive escalation of potential events/items of interest. The role will include access control, application and development, risk management, operational security, incident response, business continuity, operational and physical security of systems, as well as ongoing user training and reporting requirements. Primary responsibilities include: Monitor, investigate … with Detection and Automation team to support development of detection alerts, security automation and recommendations for tuning of rules to reduce false positives Support incident investigation, containment, eradication, and recovery activities while maintaining accurate documentation, and contributing to the continuous improvement of detection capabilities, playbooks, and operational processes Respond ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

Amazon AWS Security Incident Response is seeking a Security Engineer I to join a fast-paced team responsible for threat detection and incident response across customer environments. The role emphasizes learning, collaboration, and communicating complex security concepts to non-technical audiences. You will monitor networks ...

Tier-1 customer-facing services, in partnership with Product and Engineering. Establish error budget policy and the enforcement mechanism when budgets burn. Design the incident command structure: severity rubric, declaration criteria, war-room protocol, stakeholder communication cadence, and the postmortem template. Train the first cohort of incident commanders … already in use) over net-new procurement. Define the instrumentation standards all new services must meet. Partner with the VP to migrate the interim incident response RACI — currently held by matrixed individuals across IT, Engineering, Support, and Enterprise Security — into a durable SRE-owned model. Establish ...

respond to, recover from and learn from cyber incidents. This is a varied position combining hands-on technical recovery testing with Business Continuity, Incident Response and Cyber Recovery planning. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

support company is seeking a Junior Incident Response Analyst. It is expected that the employee will develop essential skills and contribute to protecting their digital infrastructure. As a Junior Incident Response Analyst, you’ll work closely with their IT and cybersecurity team to safeguard their systems ...

responsible for safeguarding our natural environment, supporting our world-leading food and farming industry, and sustaining a thriving rural economy. The Head of Security Incident and Response will provide operational leadership of the Defra Group Security Incident Response Management capability, ensuring readiness to respond to incidents ...

Incident Management Analyst Contract: 12 months Location: Chester Working Pattern Training Phase - First 2 Months Monday to Friday 7:00am - 4:00pm UK time Operational Shift Pattern Once fully operational, the role will operate on a rotating shift pattern: Shift A: Sunday to Thursday, 7:00am - 4:00pm Shift … Tuesday to Saturday, 7:00am - 4:00pm Role Overview We are seeking an experienced Incident Management Analyst to join a complex enterprise environment within the Financial Services sector. The successful candidate will be responsible for the end-to-end management of enterprise incidents, with a particular focus on major ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

platform security and intelligent automation. You will operate the AI security control plane, harden agentic systems across their lifecycle, and establish monitoring and response that makes agent behavior observable, safe and auditable. You will be empowered to take ownership from day one—designing secure patterns, building production-grade automations … decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats and control failures; lead or support triage, containment, eradication, recovery and post-incident improvement ...

native platform. You’ll work across the business to improve how we build, deploy and monitor our systems , while playing a key role in incident response and continuous improvement. You’ll report directly to our Chief Technology Officer and will collaborate closely with engineers across Bumper to build … workflows Excellent communication and calmness under pressure A passion for automation and reducing toil Nice to haves... Experience with Grafana Cloud, IRM or other incident management tools Familiarity with Argo Workflows/ArgoCD Experience defining SLIs/SLOs at scale Background in Platform Engineering Experience improving or redesigning incident ...

capability within a cloud-first environment built around Microsoft 365, Intune and cloud applications. The role Own IT service delivery across multiple sites, including incident, request and change management. Manage the outsourced service desk against SLAs, lead service reviews and challenge performance and costs. Line manage an IT Support … cloud applications, alongside site networks, connectivity and associated devices. Own the security risk register and improvement roadmap. Select and onboard a managed detection and response provider, integrate relevant log sources and oversee detection tuning, alert triage and provider performance. Lead vulnerability management, patching and remediation, and develop and test ...