26 to 50 of 83 Incident Response Jobs in the West Midlands

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...

with Netcom Training’s fully-funded Level 3 NCFE Certificate in Cyber Security Practices. Gain hands-on skills in threat intelligence, security testing and incident response to prepare for cyber security and IT opportunities in Greater Manchester. Previous learners have progressed into roles including Cyber Security Analyst … security principles. Threat Intelligence - Develop expertise to identify risks and analyze threats. Vulnerability Testing - Conduct cyber security testing, identify vulnerabilities, and implement controls. Incident Response - Prepare for and respond to live cyber security incidents. Ethics & Law - Understand legislation and ethical conduct within the cyber security sector. Career Pathway ...

security incidents and protect monitored environments. Working within defined procedures, runbooks, and escalation paths, the SOC Analyst performs initial investigations, validates alerts, and supports incident response activities. The role requires strong attention to detail, disciplined execution, and the ability to work effectively in a high‐volume, operational environment. … will triage and analyse alerts to determine whether they represent potential security or service incidents, and prioritise them in line with defined security incident management policies. You will conduct first‐line investigations using SIEM, SOAR, and supporting security tools, validating alerts, gathering relevant evidence, and assessing initial impact ...

Analyse resource utilization, optimise for performance and cost, and implement automated scaling and rightsizing. Produce dashboards and reports for operational and business stakeholders. Lead incident response for cloud infrastructure issues, including root cause analysis and post-mortem documentation Develop and test disaster recovery and business continuity plans ...

periodic access reviews. Overseeing patching, maintenance and technical remediation. Managing backup and recovery solutions, including restoration testing. Monitoring infrastructure performance, availability and resilience. Supporting incident response, service restoration and post-incident reviews. Delivering infrastructure improvements, technical changes and projects in line with appropriate governance and change controls. ...

leaders (directors, managers and senior ICs), building high-performing teams with clear ownership and strong engineering culture Own platform reliability, resilience, and operational excellence: incident management, on-call standards, SLIs/SLOs, post-incident learning, and continuous improvement Partner with product engineering and threat research leaders to improve … focused environment Strong track record of building reliable, secure platforms and improving developer productivity through pragmatic, outcome-driven investment Experience establishing operational excellence practices (incident response, on-call, observability, SLOs, post-incident learning) and driving continuous improvement Ability to set strategy and translate it into execution ...

with cloud environments, focusing on compliant, privacy‐aware design. Risk & Threat Management Conduct comprehensive risk assessments and threat modelling for cloud and AI systems.Support incident response, including issues involving AI‐driven systems and automated agents.Provide actionable mitigation strategies for cloud and AI threats. Stakeholder Engagement & Technical Leadership Provide ...

with cloud environments, focusing on compliant, privacy‐aware design. Conduct comprehensive risk assessments and threat modelling for cloud and AI systems. Support incident response, including issues involving AI‐driven systems and automated agents. Provide actionable mitigation strategies for cloud and AI threats. Stakeholder Engagement & Technical Leadership Provide expert ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

immediate containment steps (e.g. asset isolation, password reset). Escalation: Escalate confirmed or high severity incidents to the Level 2 SOC (outsourced) or internal incident response teams, ensuring complete and accurate handoff documentation. Incident Documentation: Create and maintain detailed case notes, timelines, and evidence within the case ...

access management, cloud services, private cloud environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response, Security Frameworks, Vulnerability Management, SIEM, XDR, EDR/EPP, IPS/IDS/NDR, endpoint security, and cloud security. Hands‐on experience ...

Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark etc.). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … projects Cyber Security Microsoft security technologies Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

Improving detection rules, correlation logic and SOC playbooks Investigating recurring alerts and reducing false positives Supporting vulnerability management and remediation activity Contributing to post-incident reviews and lessons learned Producing incident, vulnerability and SOC reporting Working closely with wider infrastructure, network, architecture and development teams Sharing knowledge … years' experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with ...

troubleshooting techniques, analyzing logs and metrics, and collaborating with development teams to identify and resolve root causes. You will also contribute to creating comprehensive incident response plans and post-mortem analyses. Drive Automation Initiatives to Streamline Operational Tasks and Enhance System Reliability: You will champion automation initiatives ...

industry exposure with a depth of technical security knowledge and experience in cyber security, including cyber strategy, cyber risk management, security governance, cyber resilience, incident response, security operations, IAM and cyber threat management. Experience and knowledge of the regulatory, assurance and standards environment facing healthcare clients, including cyber … accept speculative CVs from agencies - you can see our policy on agencies here: Similar vacancies you might be interested in Cyber Response and Recovery - Assistant Manager (Proactive) Assistant Manager - Cyber and Digital Health Cyber Response and Recovery - Assistant Manager (Reactive) Cyber Response & Recovery - Manager (Remediation focus) #J ...

tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will be of particular interest: Experience contributing to incident response across a complex microservice-based application Application Security best practice including identifying potential threats and vulnerabilities in applications and cloud infrastructure, designing ...

including the development and mentoring of the Level 2 Analyst, monitoringnetworks to actively remediate unauthorised activities. Requirements Tasks: Developand integrate security event monitoring and incident management services. Respond tosecurity incidents as they occur as part of an incident response team. Implementmetrics and dashboards to give visibility … Enterprise infrastructure. Assistwith the leadership of a composite cyber response team during incidents andinvestigations Use of theSOAR platform to assist with playbook automation and case managementcapabilities to streamline team processes and tools. Produce documentationto ensure the repeatability and standardisation of security operatingprocedures. Developadditional investigative methods using the Authority ...

with ITIL v4, enabled by ServiceNow, automation, and the practical use of generative and agentic AI. Our 24x7 Operations squads provide proactive management and incident response across infrastructure, cloud and modern workplace services. As a Systems Engineer within our 24x7 Operations function, you will be a capable … rounder, providing third-line operational support across both core infrastructure and Microsoft Modern Workplace services. You will contribute to live service stability through effective incident resolution, proactive maintenance, and disciplined execution of standard changes, escalating complex or ambiguous issues to Senior Systems Engineers and Squad Managers as needed. This ...

ready solutions and address architectural gaps using modern microservices and cloud-native patterns. Own production health for your services, contributing to on-call rotations, incident response, and post-incident reviews in a "you build it, you run it" environment. Identify, analyse, and resolve system availability, reliability ...

ready solutions and address architectural gaps using modern microservices and cloud-native patterns. Own production health for your services, contributing to on-call rotations, incident response, and post-incident reviews in a "you build it, you run it" environment. Identify, analyse, and resolve system availability, reliability ...

fascinated by cyber threats, digital investigations and how organisations protect themselves from cyber attacks? We’re looking for an ambitious Cyber Threat Detection & Response Apprentice to join our growing team and begin an exciting career in one of the fastest-growing areas of technology. This is an opportunity … specialists help businesses stay connected, secure and future-ready through innovative technology solutions. What you’ll be doing: As a Cyber Threat Detection & Response Apprentice at SNO, you’ll work alongside experienced professionals to strengthen our cyber defence capabilities. Your responsibilities will include: Assisting in monitoring network traffic ...

bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously monitor customer environments; yet it doesn’t stop there. Not only will you be expected to assess threats using all information sources … also get involved in projects that enhance the capability of our services and ensure we are providing cutting-edge detection & response services to our clients. This includes threat hunting, supporting the implementation of new cutting-edge technology, malware analysis, recommending detections and getting involved in strategic cross-team projects ...