1 to 25 of 31 Remote/Hybrid Incident Response Jobs in the North of England

Security Incident Response Engineer (ServiceNow) Contract: 6 Months (Likely Extension)Location: HybridIR35: Outside/LTD – £700PDSC Cleared/BPSSA highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC).This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling. Key Responsibilities ServiceNow SIR Workflow Design & Development Design and configure ...

Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred … Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow ...

Senior Cyber Security Analyst to help strengthen its security posture and safeguard critical systems. This is an excellent opportunity for someone passionate about incident response and proactive threat management within a dynamic, fast-paced environment. The ideal candidate will have a positive go-getter attitude, and will have … experience of incident response, using MS security tools and ideally an understanding of Tanium. Key Responsibilities Working with the Head of Cyber to mature the incident response capability Using your understanding of the contemporary threat environment to assist with your vulnerability investigations and response Lead ...

that security operations activities are executed efficiently, consistently and in line with defined SLAs and operational standards, through hands-on technical leadership across SOC, Incident Response, Threat Intelligence, Insider Risk and Vulnerability Management. This role acts as a senior technical escalation point, supporting complex investigations and driving improvements … detection, response, automation and operational processes. The role holder is expected to lead through expertise, supporting analysts and ensuring Security Operations operates with discipline, quality and continuous improvement. The key responsibilities of the role are: Act as the primary technical escalation point for security events and incidents identified ...

team within a leading international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing … Identity Defender for Cloud Apps Microsoft Intune Qualys AttackIQ XM Cyber We're Interested In Candidates with experience in: SOC Operations Security Monitoring Incident Response Threat Hunting Cyber Defence Vulnerability Management Security Operations Engineering You may currently be working as a: Senior SOC Analyst SOC Analyst Cyber Security ...

Senior Cyber Security Operations Lead for a six‐month, fully remote contract with European Time Zone hours and Inside IR35. You will drive incident response and security operations across a global environment. The role requires hands‐on expertise with SIEM/EDR, vulnerability tools, and cloud security, while ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3rd tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3 tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

focused on monitoring, analysing and responding to security threats, while driving continuous improvement across our security operations capability. Youll play a key role in incident response, threat intelligence, vulnerability management and ensuring effective use of our security tools and processes to reduce risk across the technology estate. ...

workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong commercial experience with AWS, Azure … understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

Golden Path" templates and adoption Operational Oversight & Risk Management Oversee reliability, performance, and security of platforms and pipelines Lead vulnerability management and remediation Support incident response and post-incident reviews Integrate telemetry across Azure ecosystem (Defender, Entra, WAF) Collaboration Across Technology Act as a senior advisor ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...

responding to incidents, but continuously improving through engineering excellence, threat intelligence, and data-driven decision-making. It combines real-time defense (e.g., monitoring, detection, incident response) with long-term capability building (e.g., tooling, automation, detection engineering, and platform integration) leaning into the opportunity of Agentic AI for faster … Operations and Engineering partners closely with Security Architecture, Threat Intelligence, Engagement and Engineering teams to ensure that controls are operationalized, detections are meaningful, and response processes are efficient and repeatable. A key focus is reducing mean time to detect and respond (MTTD/MTTR), increasing visibility across the environment ...

vulnerability management, and compliance controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

code, automation frameworks, and database-as-code practices using Redgate Flyway. Own critical customer systems, ensuring operational resilience, observability, performance optimisation, and rapid incident response. Collaborate with Product, Delivery, Operations, and Commercial teams to shape technical solutions, delivery plans, and strategic outcomes. Promote secure-by-design, compliance-by-design ...

solving abilities Experience supporting cyber transformation or security improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that ...

role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security … initiatives and stay ahead of emerging threats, including AI and automated attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools ...

Cyber Security teams. Drive the delivery of high-quality ICT services across 1st, 2nd and 3rd line support. Embed ITIL best practice across Incident, Problem, Change and Continual Service Improvement. Manage cloud infrastructure, cyber security platforms and operational technology services. Lead and mentor technical managers and develop high-performing … Service Desk, Infrastructure, Cloud and Security teams. Strong experience managing Microsoft Azure cloud environments and enterprise infrastructure. Excellentoperationalcyber security knowledge including: Security monitoring Incident response Vulnerability management Endpoint protection Experience managing enterprise networking, end user computing and modern workplace technologies. Strong supplier and contract management experience. Experience delivering ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...

cloud services, Kubernetes support, Terraform (IaC), and GitHub-based workflows. You will be involved in day-to-day operational duties such as proactive monitoring, incident troubleshooting, platform support and processing subscription requests all within established change control processes. This opportunity is perfect for individuals who enjoy automation, cloud infrastructure … Monitor and maintain Azure cloud infrastructure, ensuring platform uptime and performance Support Kubernetes deployments and troubleshoot cloud services as part of L2/L3 incident response Use Terraform to update and maintain Infrastructure as Code modules Participate in CI/CD tasks using GitHub Actions or similar tooling ...

First Automation & Intelligent Tooling Define and lead an AI-first automation roadmap for Engineering Infrastructure and Enterprise Tooling (e.g., reducing waste, accelerating reviews, improving incident response, increasing release confidence). Architect and ship AI/LLM-enabled workflow automation across the SDLC (e.g., risk assessment, automated build, test … impact analysis, auto-triage of build/test failures). Establish policies and guardrails for AI usage in internal tools: data handling, prompt/response logging, model/provider selection, evaluation, fallback behaviors, and abuse prevention . Dev Productivity & Enterprise Tooling (Global Scale) Set technical direction and standards ...

lifecycle activities Support and remediate Veeam backup and recovery operations Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, ideally within managed services Strong … Experience supporting enterprise backup technologies such as Veeam Knowledge of WSUS, SCCM, and patch compliance processes PowerShell scripting and automation experience Strong troubleshooting and incident management skills Why Join? Work with modern Azure, VMware, Windows, and enterprise backup technologies Take ownership of critical infrastructure services and large-scale patching ...