1 to 25 of 37 Incident Response Jobs in Northern Ireland

Senior Security Analyst , you'll play a key role in protecting the organisation against cyber threats through proactive security monitoring, threat detection, investigation and incident response. Working within a collaborative global Security Operations Centre (SOC), you'll be responsible for identifying suspicious activity, analysing security alerts and responding effectively … potential security incidents. This role offers the opportunity to work across a broad range of security technologies, with a particular focus on SIEM platforms, incident investigation, threat detection and response . You'll contribute to improving detection capabilities, strengthening incident response processes and enhancing the organisation ...

threats. You’ll gain exposure across a broad range of Cyber Defence activities while continuing to develop your technical expertise in areas such as incident response, threat detection, security tooling, and process improvement. Please note that weekend working is a requirement for this role, with exact shift patterns … employees or third parties, following established Cyber Defence playbooks. Respond to information security queries, working with colleagues across the team to provide appropriate guidance. Incident Response Support incident response activities, including the initial triage, investigation, containment, mitigation and remediation of confirmed incidents. Gather and document relevant ...

threats. You'll gain exposure across a broad range of Cyber Defence activities while continuing to develop your technical expertise in areas such as incident response, threat detection, security tooling, and process improvement. a text-decoration: none; color: ; tr th, tr td border: 1px solid ; tr th background … employees or third parties, following established Cyber Defence playbooks. Respond to information security queries, working with colleagues across the team to provide appropriate guidance. Incident Response Support incident response activities, including the initial triage, investigation, containment, mitigation and remediation of confirmed incidents. Gather and document relevant ...

threats. You'll gain exposure across a broad range of Cyber Defence activities while continuing to develop your technical expertise in areas such as incident response, threat detection, security tooling, and process improvement. a text-decoration: none; color: ; tr th, tr td border: 1px solid ; tr th background … employees or third parties, following established Cyber Defence playbooks. Respond to information security queries, working with colleagues across the team to provide appropriate guidance. Incident Response Support incident response activities, including the initial triage, investigation, containment, mitigation and remediation of confirmed incidents. Gather and document relevant ...

work remotely from anywhere in Northern Ireland. How you’ll make an impact Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery. You will provide strategic and technical oversight to the team and the program. Technically lead a team … techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse. Incident Detection and Response Oversee Incident Detection and Response program including ownership of incident response processes, tools and services ...

Manager to join our Digital Trust & Cyber Security practice. Working on behalf of our clients, you will lead Security Operations Centre (SOC) analysts and incident response specialists. You will combine hands-on operational leadership with advisory work. This means managing live incident containment … minimum of two days per week, depending on the role and assignment. What you'll do Lead and develop SOC analysts and incident response specialists, providing clear operational direction, coaching and support across day-to-day security operations. Take a hands-on leadership role during cyber security incidents ...

Defenders team's cybersecurity operations and service delivery. Oversee and contribute to threat hunting, threat intelligence, and compromise assessments. Guide digital forensics and incident response (DFIR) activities, including complex investigations and response efforts. Support the delivery and continuous improvement of Managed Detection and Response (MDR) services. … Lead and facilitate cybersecurity tabletop exercises (TTXs) to evaluate and strengthen organizational incident response readiness. Conduct and guide in-depth organizational threat modeling research to identify and assess security risks. Provide technical mentorship and direction to cybersecurity professionals. AI-Driven Security Operations Leverage frontier AI models and locally ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities Design, build, and operate cloud-native security controls as software products across cloud infrastructure, data platforms, and application … pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generate high-quality signals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery Apply modern ...

procedures, and secure executive approval for them. Develop and maintain a leadership‐approved Information Security risk management strategy and risk register. Implement security incident management procedures covering reporting, classification, response, record‐keeping, and post‐incident review. Deliver regular reporting to senior leadership on security posture, incidents, risks … patch management procedures, including software supply‐chain and dependency management, with defined remediation SLAs. Design production monitoring, logging, and threat detection capabilities. Develop production incident response, compromise recovery, and ransomware response plans, and run regular tabletop exercises against them. Define production backup, recovery, and resilience standards, including ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. Perform advanced event and incident analysis, including baseline establishment and trend analysis. Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident ...

skills. They have hands-on experience with EDR, firewall management, device control, API management, and endpoint security operations, along with a solid understanding of incident response and threat detection. Comfortable administering CrowdStrike and Microsoft security platforms, they leverage scripting, API integrations, GitHub-based workflows, and emerging AI-driven … years of hands on professional experience in cybersecurity, endpoint security, or security engineering. Hands-on experience administering Anti Virus/Endpoint Detection Response solutions. Experience investigating security events and supporting incident response activities A minimum of 1 years’ experience with PowerShell, Python, or similar scripting languages. Experience ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

Consulting is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within our Digital Trust & Cyber Security practice. You will manage live incidents, guide day-to-day SOC operations, and help clients modernise their security operations, improving SIEM, SOAR and EDR capabilities. You will ...

primary escalation point for service-related issues and ensure timely resolution. Collaborate with technical support, engineering, and product teams to drive service improvements. Manage incident response, root cause analysis (RCA), and continuous service optimization. Drive service reviews, reporting, and customer satisfaction initiatives. Develop and maintain strong relationships with … responsibilities and expectations adjusted accordingly. For Mid-Level Candidates: 3+ years of experience in service delivery, IT support, or technical account management. Understanding of incident management, change management, and problem resolution. Familiarity with ITIL frameworks, SLA/KPI management, and customer engagement. Strong communication and relationship-building skills. Experience ...

helps protect an international organisation from evolving cyber threats. Weekend work is required with premium pay for weekend hours. You’ll work across incident response, threat detection, tooling and process improvement, gaining exposure across time zones in our 24/7 model. #J-18808-Ljbffr ...

Security Operations Centre (CSOC). You'll take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify … Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs ...

primary escalation point for production issues, work alongside engineering to resolve complex problems, and use AI tooling to remove repetitive work. Duties/Responsibilities Incident and Escalation Response Serve as the escalation point for frontline support, owning complex production issues end to end from triage through resolution … client communication Participate in major incident response, providing impact analysis and actionable recommendations Monitor system performance and availability, resolving issues before they impact clients Manage production access and support configuration and change management activities Automation and AI Tooling Use AI tooling to accelerate investigation, including log analysis, data ...

Experience in a Cyber Security Engineer, Security Analyst or Information Security role. Knowledge of SIEM tools and security monitoring. Experience with vulnerability management and incident response. Understanding of Microsoft security technologies and Azure. Knowledge of security frameworks, policies and best practices. Strong analytical, communication and problem-solving skills. Experience ...

help keep it working reliably, observably, safely, and at a cost the business can defend. That means treating monitoring, tracing, runbooks and incident response as first class engineering, not afterthoughts. In line with our 'Prevention is better than the Cure' approach, you'll get to the root cause … agile environment. Our teams take full product ownership from design through to deployment, with a proactive support model that includes incident management and a rotational on-call function. Core support hours are UK based, from 9am to 5pm, with on-call coverage as required. What you'll be doing ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

guidance of the ChiefInformation Security Officer, will drive periodic security assessments,security policy enforcement, design and implementation and operation ofsecurity controls and systems, and incident response. The essential functionsof the position include, but are not limited to the following dutiesconsistent with the Information Security Engineer position. Essential Job Functions ...

transition to a sustainable energy future. You will work as part of the support team, providing technical support across operational and project activities including incident, problem, change and release management, application monitoring, supplier coordination, data management and specialist application support. You will work with operational teams, business users, technology … line with agreed processes, service levels and operational performance targets. Monitor application health, availability and performance, taking action to minimise service disruption. Support major incident management, helping restore critical services and maintaining effective stakeholder communication during disruptions. Undertake root cause analysis and support the implementation of preventative measures ...

security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities Strong software engineering background with experience in Java, JavaScript, Python, Go, Rust, or other modern programming languages ...

security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML. Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities. Strong software engineering background with experience in Java, JavaScript, Python, Go, Rust, or other modern programming languages. ...

validate low-confidence alert enrichments, threat summaries, and triage recommendations generated by AI agents.* Assign, dispatch, and track complex security investigations, policy changes, and incident response playbooks to appropriate Tier 2/3 analysts and consultants.* Serve as the operational escalation point when automated pipelines encounter exceptions, edge … template maintenance, submitting structured enhancement tickets to engineering when underlying code changes are required.**3. Quality Assurance & Performance Auditing*** Regularly audit AI-generated outputs (incident summaries, triage context, customer reports) against human analyst benchmarks to ensure high fidelity and operational safety.* Identify recurring false positives or hallucination patterns, collaborating ...