1 to 25 of 82 Remote/Hybrid Incident Response Jobs in the North of England

responds, and mitigates cybersecurity risk, protecting EY and client data, and our information management systems. The opportunity The Cyber & Investigative Services (CIS) Senior Cyber Incident Response Coordinator will exercise exemplary incident management techniques to coordinate incident response to cybersecurity events or incidents stemming from suspected … threats on a global scale. Candidates for the role must have an exceptional comprehension of cybersecurity incident response plans and coordination of activities, establish and foster relationships on a global scale, and have superb verbal and written communication skills. Additionally, candidates must have a sense of diplomacy, ability ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to identify, contain and investigate sophisticated cyber threats across traditional, hybrid and cloud-hosted environments. You will investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance. This team is building toward an AI-augmented … expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

capability/controls, with ongoing maturity assessments Conduct security due diligence assessments on any new/changed IS services impacting the business Conduct Cyber Incident Response testing in collaboration with team Support cyber incident response/investigations Oversee service provisioning and hosting of internal LoB apps …/release management Maintain apps (including SAP) build/support documentation (including Service Catalogue), drawing on outsourced providers Provide Master Data Management Handle major incident response (Apps, including SAP) Manage outsourced Apps support contract performance/resources, directing and supervising as required Act as the "glue" to connect ...

technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including … high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...

supporting secure AI adoption, reviewing LLM-based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

help drive the next phase of security maturity. This is a fantastic opportunity for someone who enjoys a broad role combining security operations, governance, incident response, vulnerability management and stakeholder engagement, while leading a small but growing cyber function. What You'll Be Doing Leading the organisation … cyber security programme Managing and mentoring a Cyber Security Analyst Overseeing security operations, monitoring and incident response Driving vulnerability management and security improvements Managing and optimising security tooling including Microsoft Defender, Endpoint Security, Mimecast and Darktrace Working closely with senior stakeholders to improve cyber resilience Supporting security awareness ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

Risk and Control Assessment: Identify security risks, vulnerabilities, control gaps and emerging threats within assigned workstreams, supporting proportionate remediation, escalation and risk treatment activity. Incident Response: Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder updates, reporting and escalation. Compliance … activity, proposing recommendations where necessary. Workstream and Control Support: Support Information Security activity where it relates to assigned workstreams, user and data security controls, incident response, control operation, evidence, reporting, policy compliance, remediation or escalation. Threat Awareness and Continuous Improvement: Maintain awareness of emerging cyber security threats, technology ...

readiness, and ongoing compliance monitoring. Assist with the identification, assessment, and documentation of security risks. Track remediation actions and follow up with control owners. Incident Response & Problem Support Support security incident response activities, including investigation and evidence gathering. Assist with root cause analysis and documentation … Experience Experience in an information security, IT risk, or IT operations role. Understanding of common cybersecurity risks, threats, and control types. Familiarity with incident management, risk assessment, and assurance activities. Ability to analyse information, identify issues, and document findings clearly. Strong written and verbal communication skills. Ability to manage ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access ...

# Major Incident Manager LeadManchesterApply for this job* Permanent* Experienced Professionals* Cloud Infrastructure Management* ID 493235-en\\_GB## **About the job you’re considering**An exciting opportunity to join Capgemini as a Major Incident Manager Lead, supporting a diverse portfolio of high-profile clients.In this role, you will … lead and oversee the end-to-end major incident management process, ensuring swift resolution and minimal business impact. You will be a confident decision-maker and analytical problem solver, thriving in high-pressure environments. As the primary point of contact during major incidents, you will coordinate cross-functional teams ...

audiences. Influence technical decisions whilst balancing security, resilience and delivery outcomes. Essential Skills & Experience Strong background within Security Architecture, Cyber Security Engineering, Security Operations, Incident Response, Infrastructure Architecture, Network Architecture or a related technical security discipline. Excellent understanding of networking fundamentals, protocols, infrastructure design and security architecture principles. … Particularly Relevant Backgrounds The hiring team is particularly interested in candidates who have progressed into security from technical disciplines such as: Security Operations (SOC) Incident Response Penetration Testing Infrastructure Engineering Systems Administration Network Engineering or Network Architecture Candidates from government and other highly regulated environments are often well ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

security monitoring framework for Felix. Act as technical lead for security incidents, from investigation and containment through to recovery and lessons learned, and maintain incident response playbooks. Run vulnerability management, including patching and the remediation of findings from penetration tests. Run security awareness activity, including phishing simulations … bring: Strong, hands‐on experience of a cloud‐based Microsoft 365 environment and its security tools. A strong security background, including Cyber Essentials, security incident response and vulnerability management. Practical experience of looking after Windows and Android devices across multiple sites. Experience of leading a small technical team ...