76 to 100 of 236 Incident Response Jobs in the North of England

Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk assessments and support audit and compliance activities. Drive improvements in data security, governance, and cyber … with ISO27001 principles and broader governance or quality frameworks such as ISO9001. Experience with backup, disaster recovery, and business continuity planning. Strong troubleshooting and incident management capability. Experience managing third‐party suppliers and service providers. Excellent communication, stakeholder management, and relationship‐building skills. Ambition and capability to progress toward ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation, AI and modern technology ...

060We support flexible working – click here for more information on flexible working optionsFlexible Working OptionsHybrid Working, Job ShareJob Description Summary. Job DescriptionSenior Detection & Response EngineerSALARY: 92,701 - 109,060LOCATION(S): Edinburgh, Leeds, Bristol, ManchesterHOURS: Full timeWORKING PATTERN: Our work style is hybrid, which involves spending at least two days … office sites. About this opportunityHelp defend one of the UK's largest organisations against evolving cyber threats. As a Senior Detection & Response Engineer within our Cyber Defence Centre, you'll play a key role in protecting the organisation from cyber threats as a senior individual contributor. You'll combine ...

060We support flexible working – click here for more information on flexible working optionsFlexible Working OptionsHybrid Working, Job ShareJob Description Summary. Job DescriptionSenior Detection & Response EngineerSALARY: 92,701 - 109,060LOCATION(S): Edinburgh, Leeds, Bristol, ManchesterHOURS: Full timeWORKING PATTERN: Our work style is hybrid, which involves spending at least two days … office sites. About this opportunityHelp defend one of the UK's largest organisations against evolving cyber threats. As a Senior Detection & Response Engineer within our Cyber Defence Centre, you'll play a key role in protecting the organisation from cyber threats as a senior individual contributor. You'll combine ...

rotations, certificate renewals and infrastructure upgrades Contribute to the management and resolution of complex L2/L3 incidents Conduct root cause analysis and post-incident investigations Maintain and update runbooks and operational documentation Participate in an on-call rota, including out-of-hours incident response Mentor … infrastructure-as-code technologies such as Terraform Solid understanding of ITIL practices Experience supporting and operating production systems within an on-call environment, including incident triage, technical investigation, remediation and post-incident review. Experience implementing and deploying production changes in business-critical environments. Strong troubleshooting and root-cause ...

third-party suppliers, and product vendors to ensure effective support and performance of applications and systems Proactively monitor security systems and tools, leading the response to security incidents and issues; support investigations and incident response, including participation in an on-call security rota when required Provide trusted ...

SIEM services Previous experience taking a business through Cyber Essentials Plus and/or ISO 27001 certification Experience leading or supporting cyber security incident response and investigations Good grounding in infrastructure and networking, including Active Directory, DNS, virtualisation, cloud and firewalls Working knowledge of frameworks such as NIST … Entra ID, Purview and Defender Managing the performance of the outsourced SOC, MDR and SIEM providers and challenging them on quality Leading the technical response to incidents, from investigation and containment through to root cause Owning vulnerability management and coordinating penetration testing Leading the business through Cyber Essentials Plus ...

technical role (e.g. TAM, Security Consultant) Experience engaging senior stakeholders (CISO, Head of IT/Security) Strong understanding of SOC operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability ...

initiatives. Assist with vulnerability management and remediation activities. Help clients improve their Microsoft Secure Score and overall security posture. Participate in infrastructure and security incident response activities. Administer and support Keeper Security password management environments. Promote best practice around privileged access management, password security and identity protection. Support ...

into observability and alerting platforms. Administer, maintain and enhance the Trust's monitoring and availability tools, ensuring they remain reliable and effective. Support major incident investigation, post-incident reviews and the production of monitoring and analytical reports. Identify gaps in monitoring and opportunities to improve alerting, dashboards, automation … dashboards. Working with infrastructure, application, cybersecurity and clinical safety teams, you will help improve monitoring coverage, support proactive identification of issues and contribute to incident response, service resilience and continual improvement. This is a unique opportunity to shape a core digital capability within a progressive Trust. Person specification ...

into observability and alerting platforms. Administer, maintain and enhance the Trust's monitoring and availability tools, ensuring they remain reliable and effective. Support major incident investigation, post-incident reviews and the production of monitoring and analytical reports. Identify gaps in monitoring and opportunities to improve alerting, dashboards, automation … dashboards. Working with infrastructure, application, cybersecurity and clinical safety teams, you will help improve monitoring coverage, support proactive identification of issues and contribute to incident response, service resilience and continual improvement. This is a unique opportunity to shape a core digital capability within a progressive Trust. Person specification ...

including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical ...

manner. Specifically you will: Support the rest of the security operations team to monitor, triage and investigate alerts and incidents within Sentinel Conduct initial incident triage, liaising with a 3rd party SOC provider, determining scope, urgency and appropriate actions to mitigate threats. Participate in the incident response … ITSM tool. Undertake BAU activities such as daily checks. Assist with analysing and trending of security log data. Support triaging of vulnerabilities, response and mitigation with teams across IT. Support remediation actions meetings across technical teams including evaluating and translating vulnerability scan and pentest results. Support with Threat Hunting ...

security controls. Improve security across endpoints, identities, applications, cloud services, and infrastructure. Support vulnerability identification, prioritisation, and remediation. Monitor security alerts and support incident investigation and response. Work with IT teams to resolve vulnerabilities, security weaknesses, and configuration issues. Maintain effective security controls and support Cyber Essentials, Cyber Essentials … Microsoft Defender technologies, including Defender for Endpoint and Microsoft 365 Defender. Experience supporting vulnerability management and remediation activities. Knowledge of security monitoring, alert triage, incident response, and technical investigation. Experience configuring or supporting security controls across cloud, endpoint, and identity platforms. Strong analytical and problem-solving skills with ...

automation Manage Azure Key Vault, secrets, and certificate lifecycle processes Implement infrastructure changes and contribute to CAB processes Resolve technical escalations and support major incident response Participate in a shared on-call rota What We're Looking For Strong experience in infrastructure engineering, cloud operations, or managed services …/or ARM templates Azure DevOps and CI/CD pipeline experience Scripting and automation experience using Bash and/or PowerShell Strong troubleshooting, incident management, and problem-solving skills Why Join? Work with modern cloud, automation, and DevOps technologies Play a key role in driving Infrastructure-as-Code ...

practical hardening standards that people will follow Spotting where monitoring, investigation and reporting can be automated or scripted Incidents and suppliers Leading the technical response to incidents: investigation, evidence, containment, recovery and root cause Managing the outsourced SOC, MDR and SIEM providers and reviewing alerts, incidents and trends Challenging … SIEM services, and the confidence to challenge them You've taken a business through Cyber Essentials Plus and/or ISO 27001 Incident response experience, leading or supporting investigations Good grounding in infrastructure and networking: AD, DNS, virtualisation, cloud, firewalls Working knowledge of frameworks such as NIST ...

practices. Monitor security risks and implement appropriate controls. Manage user access, permissions and identity management. Ensure compliance with relevant legislation and organisational policies. Coordinate incident response and recovery. Service Delivery Ensure timely and effective resolution of IT issues. Monitor service desk performance and user satisfaction. Escalate and manage … self-confident. Microsoft certifications. Experience with ERP or line-of-business systems Pipedrive, Sage, RAPS and Procore). Key Performance Indicators (KPIs) Service desk response and resolution times. Cyber security compliance. Successful delivery of IT projects. Budget adherence. Team performance and development. Reduction in recurring IT incidents. Authority ...

controls. Help establish governance and assurance from POC through to production. Address data access, permissions, IAM, DLP and non-human identity risks. Develop AI incident response and assurance approaches. Assess AI models, vendors and third-party risks. Lead client workshops and contribute to proposals and pre-sales. Develop ...

architecture teams to improve platform capabilities and developer workflows. Mentor engineers and contribute to platform engineering best practices, governance, and technical strategy. Lead incident response, reliability improvements, root cause analysis, and operational maturity initiatives. Improve platform security, scalability, resiliency, and deployment efficiency across AWS, Azure, and GCP environments. ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

focus on performance, scalability, and cost efficiency. Take part in on-call rotations and own the operational health of high-availability production services, including incident response and post-incident improvements. Lead design reviews and code reviews, raising the quality bar across the team and mentoring mid-level ...

Operations: Instrument services with structured logging, metrics, and tracing, and define user-focused alerts. Establish service level objectives and report against them. Run incident response: triage, mitigate, restore, and document post-incident reviews with corrective actions. Machine Learning Operations: Package, version, and deploy models and dependencies ...