1 to 25 of 46 Incident Response Jobs in Northern Ireland

playbooks for the Cyber Defence team. Respond to inbound queries to the information security mailbox, consulting with more senior colleagues for advice where required. Incident Response: Participate in incident response activities, including CSIRT activities, for confirmed incidents in local time-zone: Conduct initial triage and investigation. … Assist with containment, mitigation, and remediation efforts, ensuring any forensic evidence is gathered and documented appropriately. Participate in security incident response exercises and contribute to post-exercise reviews. Be part of the Cyber Defence on-call rota, which may require out-of-hours work. Pick-up and hand ...

playbooks for the Cyber Defence team. Respond to inbound queries to the information security mailbox, consulting with more senior colleagues for advice where required. Incident Response: Participate in incident response activities, including CSIRT activities, for confirmed incidents in local time-zone: Conduct initial triage and investigation. … Assist with containment, mitigation, and remediation efforts, ensuring any forensic evidence is gathered and documented appropriately. Participate in security incident response exercises and contribute to post-exercise reviews. Be part of the Cyber Defence on-call rota, which may require out-of-hours work. Pick-up and hand ...

playbooks for the Cyber Defence team. Respond to inbound queries to the information security mailbox, consulting with more senior colleagues for advice where required. Incident Response:Participate in incident response activities, including CSIRT activities, for confirmed incidents in local time-zone:Conduct initial triage and investigation.Assist … with containment, mitigation, and remediation efforts, ensuring any forensic evidence is gathered and documented appropriately.Participate in security incident response exercises and contribute to post-exercise reviews.Be part of the Cyber Defence on-call rota, which may require out-of-hours work.Pick-up and hand-off incident response ...

based in Belfast. They will perform a critical role in solidifying the firm's security posture, focusing on the in-depth analysis, and effective response to cyber security events and incidents within their time-zone. They will also contribute to the effectiveness and cohesion of the Cyber Defence team … firm’s Managed Security Service Provider (MSSP) to identify potential incidents. Assist and advise junior colleagues during investigations where additional experience is required. Incident Response: Conduct initial triage and investigation of confirmed incidents. Perform containment, mitigation, and remediation activities for incidents, ensuring that any required forensic evidence ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, and operate cloud-native security controls as software products across cloud infrastructure, data platforms, and application … implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, and operate cloud-native security controls as software products across cloud infrastructure, data platforms, and application ...

Genuine founding-team opportunity with a clear path toward technical or team leadership as the UK presence scales Hands-on cloud security work across incident response, detection engineering and advanced threat investigations About the Company Our client is a next-generation cloud security platform that uses runtime context … Role This is a rare opportunity to become the founding UK member of the Security organisation, working within the MDR (Managed Detection and Response) team. You'll bring deep, hands-on cloud security expertise to proactive customer reviews and advanced investigations, working closely with Security Analysts, Researchers and Backend ...

expertise to help maintain the availability, performance, and reliability of our critical SaaS applications. In this role, you will own and drive automation, monitoring, incident response, and infrastructure improvements across our multi-cloud, multi-region environment, working closely with senior engineering and cross-functional teams. What …/node failures, deployment rollbacks, ingress and networking issues, and resource/autoscaling problems. Participate in an on-call rotation (including weekends) and drive incident response from detection through resolution, with a primary focus on customer experience and minimizing impact. Drive improvements to disaster recovery, failover, and incident ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. Perform advanced event and incident analysis, including baseline establishment and trend analysis. Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path.You will be guided by Threat Intelligence which … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. • Perform advanced event and incident analysis, including baseline establishment and trend analysis.• Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours• Support Major Incident ...

will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Senior SOC Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks while mentoring analysts and being their escalation point. You will help provide security metrics, threat landscape updates and emerging trends. This role requires both deep analytical skills for threat detection and response, as well as technical engineering ...

Compliance & Assurance Support cybersecurity compliance activities aligned to UK and European regulatory frameworks. Maintain compliance documentation, evidence repositories, and control registers. Assist with security incident reporting processes and regulatory obligations. Monitor emerging guidance and regulations, assessing their impact on the business. Cyber Assessment Framework (CAF) Participate in assessments against … Monitor emerging cyber threats associated with AI and advance awareness across the organisation. Cybersecurity Operations Support security monitoring and vulnerability management activities. Assist with incident response and cyber risk assessments. Contribute to supplier and third-party security reviews. Support the development of security policies, standards, and awareness initiatives. ...

security working group, setting priorities and driving resolution Translate threat intelligence into actionable engineering tasks and deliver monthly risk summaries to the ELT Vulnerability & Incident Management Own the full vulnerability lifecycle: discovery, triage, remediation, and reporting Coordinate incident response and set risk-based remediation timelines Security Tooling … classes (OWASP Top 10 and beyond) and practical experience with SAST, DAST, SCA, and secrets scanning tooling Proven end-to-end vulnerability management and incident response experience, including supply chain risk mitigation The ability to assess risk and make clear prioritisation calls, even with imperfect information A track ...

Data Science to harden existing production models, build reliable data and feature pipelines, and own the full MLOps lifecycle from deployment through to monitoring, incident response and continuous improvement. Alongside delivery, you will establish observability standards, lead deployment practices and contribute to platform roadmap development. This role suits … from R&D into reliable, observable production systems Build and maintain reproducible pipelines for training data, feature generation and embeddings Own reliability, monitoring and incident response for ML models and agents in production, including CI/CD, versioning, canary deployment and rollback Build observability into ML services covering ...

Glance Founding UK member of the security organisation at a fast-growing, next-generation cloud security platform Specialism in MDR, detection engineering, incident response, and cloud threat analysis (AWS, GCP, or Azure) Hybrid, Belfast-based ... 3 days per week in office ... must already be based … confident engaging directly with customers under pressure. Key Responsibilities Own UK-hours MDR coverage independently, taking end-to-end responsibility for monitoring, triage, and response Lead in-depth security investigations across supply chain, API, malware, and runtime attack scenarios, documenting outcomes and building playbooks Handle complex and critical incidents ...

technical expertise across Data and Database Security within complex enterprise environments Configure, maintain and optimise security platforms and policies Analyse security events and support incident response and root-cause analysis Troubleshoot complex technical and security issues Support the deployment and configuration of security solutions across on-premise …/NoSQL databases Understanding of Data or Database Security Cloud infrastructure and security , ideally within AWS, Azure or GCP Security engineering, technical troubleshooting or incident response Web and application security, including familiarity with the OWASP Top 10 Networking fundamentals including TCP/IP, HTTP/ ...

pipelines for database provisioning, schema changes, migrations, and configuration management. Partner with product engineering, SRE, security, and cloud teams to define SLAs/SLOs, incident response, root cause analysis, and risk mitigation. Establish monitoring, alerting, and observability for database health and performance. Drive proactive incident prevention. Define … access, security, backups, and compliance. Participate in design reviews, capacity planning, and product inception to translate feature requirements into scalable data solutions. Lead post-incident reviews and continuous improvement initiatives to reduce mean time to detect and recover. Represent the database platform across cross-functional initiatives and influence long ...

pipelines and automated delivery workflows Implement monitoring, logging, tracing and observability best practices Optimise cloud environments for performance, reliability and cost efficiency Support incident response, troubleshooting and root cause analysis Apply cloud security best practices and governance controls Contribute to platform automation and developer self‐service capabilities Help ...

architecture — including VPC design, VPC peering, shared VPC, Cloud Interconnect/VPN, Cloud NAT, firewall rules, and DNS Automate deployment pipelines, monitoring, alerting, and incident response using modern CI/CD and GitOps practices Monitor site stability and performance using GCP-native observability tooling (Cloud Monitoring, Cloud Logging ...

security alerts and events using our core security tools Help ensure security controls are deployed and operating effectively across our technology environment Support incident response activities by following and improving security processes and procedures Monitor systems for security and compliance issues and help drive remediation Maintain and support ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group as a trusted technical ...

reliability, resiliency, and operational excellence of authentication services by defining and achieving SLOs, improving service availability and performance, instrumenting and enhancing observability, and leading incident response efforts to reduce MTTR.* Evaluate emerging technologies and industry trends, establish engineering standards and best practices, and provide technical leadership across authentication ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection.Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery.Toil Reduction & Automation: Actively ...

engineers, with a clear path toward technical or team leadership as the U.K. presence scales. Responsibilities Assist in fine-tuning Upwind's detection and response mechanisms. Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements. Lead and conduct in-depth security investigations, including … best practices in cloud security. Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency. Requirements Based in Belfast, NI. This is a hybrid, in-office, 3 days per week role; visa sponsorship is not available. You must ...