1 to 25 of 26 Remote/Hybrid Incident Response Jobs in Yorkshire

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

Risk and Control Assessment: Identify security risks, vulnerabilities, control gaps and emerging threats within assigned workstreams, supporting proportionate remediation, escalation and risk treatment activity. Incident Response: Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder updates, reporting and escalation. Compliance … activity, proposing recommendations where necessary. Workstream and Control Support: Support Information Security activity where it relates to assigned workstreams, user and data security controls, incident response, control operation, evidence, reporting, policy compliance, remediation or escalation. Threat Awareness and Continuous Improvement: Maintain awareness of emerging cyber security threats, technology ...

audiences. Influence technical decisions whilst balancing security, resilience and delivery outcomes. Essential Skills & Experience Strong background within Security Architecture, Cyber Security Engineering, Security Operations, Incident Response, Infrastructure Architecture, Network Architecture or a related technical security discipline. Excellent understanding of networking fundamentals, protocols, infrastructure design and security architecture principles. … Particularly Relevant Backgrounds The hiring team is particularly interested in candidates who have progressed into security from technical disciplines such as: Security Operations (SOC) Incident Response Penetration Testing Infrastructure Engineering Systems Administration Network Engineering or Network Architecture Candidates from government and other highly regulated environments are often well ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

security monitoring framework for Felix. Act as technical lead for security incidents, from investigation and containment through to recovery and lessons learned, and maintain incident response playbooks. Run vulnerability management, including patching and the remediation of findings from penetration tests. Run security awareness activity, including phishing simulations … bring: Strong, hands‐on experience of a cloud‐based Microsoft 365 environment and its security tools. A strong security background, including Cyber Essentials, security incident response and vulnerability management. Practical experience of looking after Windows and Android devices across multiple sites. Experience of leading a small technical team ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

third-party SOC vendor. Triage, analyse and prioritise alerts, incidents, escalations, and investigations - validating severity, business impact, and regulatory implications of incidents Co-ordinate incident management and response activities aligned with defined policies, standards, and framework requirements by being the internal response facilitator and co-ordinator … operations. Skills, Qualifications, And Experience Previous hands-on experience in cybersecurity operations or security engineering roles. Experience of security monitoring, threat detection, incident response, and threat hunting methodologies. Strong working knowledge of endpoint security, identity and access management, authentication controls, privileged access management, and security hardening standards incl. ...

improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation. Key Responsibilities Manage and enhance Microsoft security, compliance and data protection … access control (RBAC), access reviews and Joiner-Mover-Leaver processes. Identify security risks, vulnerabilities and control gaps, driving remediation activity where required. Support security incident investigations, coordination, reporting and escalation. Assist with audits, compliance activities and the maintenance of security control evidence. Produce meaningful security reporting and insights ...

Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk assessments and support audit and compliance activities. Drive improvements in data security, governance, and cyber … with ISO27001 principles and broader governance or quality frameworks such as ISO9001. Experience with backup, disaster recovery, and business continuity planning. Strong troubleshooting and incident management capability. Experience managing third‐party suppliers and service providers. Excellent communication, stakeholder management, and relationship‐building skills. Ambition and capability to progress toward ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical ...

within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & raise problems. Monitoring and gathering … documentation of security policies, solutions, standards, and processes. Designing effective test methods for logical security controls. Day to day management of Endpoint Detection and Response (EDR). A good understanding of technical and network security requirements. Ability to proactively identify control weakness and vulnerabilities. Knowledge and use of SIEM ...

controls. Help establish governance and assurance from POC through to production. Address data access, permissions, IAM, DLP and non-human identity risks. Develop AI incident response and assurance approaches. Assess AI models, vendors and third-party risks. Lead client workshops and contribute to proposals and pre-sales. Develop ...

pipelines to enable frequent, automated and reliable software delivery.Improve platform reliability through observability, monitoring, automated testing and disaster recovery practices.Support production systems, participate in incident response and contribute to continuous service improvements.Collaborate with engineers, architects and stakeholders to deliver scalable platform solutions that meet business needs.Contribute to platform … Terraform.Knowledge of CI/CD technologies, GitLab CI, GitHub Actions, ArgoCD and modern software delivery practices.Familiarity with observability, security and operational excellence, including monitoring, incident management and platform reliability.Experience working in agile environments with a passion for automation, continuous learning and emerging technologies, including AI-powered engineering tools.What ...

engineering teams to translate technical requirements into scalable platform solutions. Mentor junior and mid-level engineers, participate in the on-call rotation, lead incident response for team-owned services and deliver engineering improvements that prevent recurring incidents. Skills 5+ years of experience in software, backend or platform engineering ...

security and IT risk registers, chairing the monthly risk meeting and ensuring action and remediations as agreed. Support business continuity, disaster recovery and major incident response and process. Support building a well-rounded security team, providing guidance and maturity across IT. Key Requirements Skills & Experience: 2–5 years ...

requirements and address platform needs###### Observability & Continuous Improvement* Maintain observability stack (Prometheus, Grafana, Loki) with comprehensive SLIs/SLOs and alerting* Create runbooks and incident response procedures* Drive cost optimisation strategies for internal cloud and AWS infrastructure* Eliminate toil through automation and optimise deployment pipelines for reliability improvements ...

blended customer and BAE staff team from our Leeds office. The role requires a minimum of security clearance and will support threat intelligence and incident response activities. Initial terms include 6- and 12-month contracts with potential extensions. #J-18808-Ljbffr ...

Group's cyber governance and security frameworks. Developing, reviewing and maintaining information security policies, standards and procedures. Managing and maintaining the Group Cyber Incident Response Plan. Working with IT, infrastructure, architecture, legal, privacy and business teams to ensure appropriate security controls are implemented. Reviewing vulnerabilities and cyber risks ...

role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced SOC to strengthen security ...

Giacom, a leading platform for IT, Comms and Cloud services in the UK, seeks a SecOps Engineer to enhance security posture and manage outsourced SOC services. You will triage alerts, investigate incidents, and drive remediation ...

Manager on infrastructure issues. You will report to the Senior Technology Services Manager and play a key role in risk assessment, policy enforcement, and incident response within a charitable network that runs on secure, #J-18808-Ljbffr ...

focusing on reliability, scalability and performance. You will work with observability, automation and engineering to deliver robust customer experiences across services. You will lead incident response, perform postmortems and drive resilience improvements. The role requires hands-on production experience with cloud, containers and monitoring tools, plus strong collaboration ...

William Hill PLC is seeking an experienced Service Operations professional to manage end-to-end incident response for sportsbook, gaming, payments, retail and data services. The role covers first and second line incidents with cross-site support and hybrid working from Leeds. You will monitor platforms, analyze logs ...