20 of 20 Incident Response Jobs in Northern Ireland

Consultant to join our Digital Trust & Cyber Security practice. Working on behalf of our clients, you will lead Security Operations Centre (SOC) analysts and incident response specialists. This is not an INTERNAL SOC ROLE. The Ideal candidate will bring a mixture of technical and strong client/stakeholder … should feel comfortable in fast paced environments and client environments. You will combine hands-on operational leadership with advisory work. This means managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR ...

listed below. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Manager to join a growing cyber security consulting practice, working with enterprise and public sector clients to improve their security operations, modernise detection and response capabilities, and respond effectively to evolving cyber threats. This is a varied, client-facing role combining hands-on operational leadership with strategic advisory work. … will lead SOC analysts and incident response specialists while helping clients assess, transform and optimise their security operations. Key responsibilities Lead, mentor and develop SOC analysts and incident response specialists, providing clear operational direction and technical guidance. Coordinate live cyber security incidents, including investigation, containment, eradication ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, and operate cloud-native security controls as software products across cloud infrastructure, data platforms, and application … implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, and operate cloud-native security controls as software products across cloud infrastructure, data platforms, and application ...

skills. They have hands-on experience with EDR, firewall management, device control, API management, and endpoint security operations, along with a solid understanding of incident response and threat detection. Comfortable administering CrowdStrike and Microsoft security platforms, they leverage scripting, API integrations, GitHub-based workflows, and emerging AI-driven … skills. They have hands-on experience with EDR, firewall management, device control, API management, and endpoint security operations, along with a solid understanding of incident response and threat detection. Comfortable administering CrowdStrike and Microsoft security platforms, they leverage scripting, API integrations, GitHub-based workflows, and emerging AI-driven ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. - Perform advanced event and incident analysis, including baseline establishment and trend analysis. - Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours - Support Major Incident ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

Data Science to harden existing production models, build reliable data and feature pipelines, and own the full MLOps lifecycle from deployment through to monitoring, incident response and continuous improvement. Alongside delivery, you will establish observability standards, lead deployment practices and contribute to platform roadmap development. This role suits … from R&D into reliable, observable production systems Build and maintain reproducible pipelines for training data, feature generation and embeddings Own reliability, monitoring and incident response for ML models and agents in production, including CI/CD, versioning, canary deployment and rollback Build observability into ML services covering ...

Security Operations Centre (CSOC). You'll take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify … Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs ...

27001. Your responsibilities will include: Conducting information security risk assessments Supporting security audits, compliance and risk management Monitoring security alerts, threats and vulnerabilities Supporting incident investigation and response Coordinating vulnerability assessments and penetration testing Reviewing security requirements for new systems and projects Supporting third-party and supplier security … NIS2 Experience with security audits, risk assessments and compliance Knowledge of Identity & Access Management, Security Monitoring, Endpoint Security, Vulnerability Management, Network Security and Incident Response Experience with Microsoft 365, Azure and Entra ID Strong communication, analytical and problem-solving skills The ability to communicate technical security concepts effectively ...

Experience in a Cyber Security Engineer, Security Analyst or Information Security role. Knowledge of SIEM tools and security monitoring. Experience with vulnerability management and incident response. Understanding of Microsoft security technologies and Azure. Knowledge of security frameworks, policies and best practices. Strong analytical, communication and problem-solving skills. Experience … discuss suitable opportunities and what you're looking for next. All applications will be treated confidentially. Skills: SIEM tools Security monitoring Vulnerability management Incident response Azure Microsoft Sentinel Benefits: Work From Home TLNT1 ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

equipment Supporting networking, printers, communications equipment and remote sites Managing user access, security groups and permissions Supporting cybersecurity initiatives, vulnerability management, MFA and incident response Assisting with ISO 27001, GDPR, Cyber Essentials and penetration-testing activities Coordinating software deployments, updates, patching and system improvements Maintaining IT documentation, asset ...

security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities Strong software engineering background with experience in Java, JavaScript, Python, Go, Rust, or other modern programming languages ...

matter most, giving customers end-to-end protection across their cloud infrastructure. They're hiring a Security Engineer to join their Managed Detection and Response (MDR) team as the founding UK member of their Security organisation, owning UK-hours coverage and working closely with analysts, researchers and engineers, with … team leadership as the UK presence grows. What You'll Do: Support proactive reviews of customer environments and help fine-tune detection and response mechanisms. Lead investigations into supply chain, API, malware and runtime attacks, building playbooks to improve future detection. Own complex or critical incidents escalated from Tier ...

validate low-confidence alert enrichments, threat summaries, and triage recommendations generated by AI agents. Assign, dispatch, and track complex security investigations, policy changes, and incident response playbooks to appropriate Tier 2/3 analysts and consultants. Serve as the operational escalation point when automated pipelines encounter exceptions, edge … template maintenance, submitting structured enhancement tickets to engineering when underlying code changes are required. 3. Quality Assurance & Performance Auditing Regularly audit AI-generated outputs (incident summaries, triage context, customer reports) against human analyst benchmarks to ensure high fidelity and operational safety. Identify recurring false positives or hallucination patterns, collaborating ...

Security Analyst, Cybersecurity Analyst, Junior Cybersecurity Analyst, Security Analyst, Information Security Analyst, Cybersecurity Engineer, Security Engineer, Cybersecurity Consultant, Penetration Tester, Ethical Hacker, SOC Analyst, Incident Response Analyst, Information Security, Network Security, Cloud Security, Threat Analysis, Vulnerability Management, Penetration Testing, Ethical Hacking, Risk Assessment, Security Operations Centre (SOC), CompTIA ...

principles. Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response. Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records. ...

performance practices throughout Collaborate with Product, Quality Engineering, Security and Cloud Operations to resolve dependencies and defects Troubleshoot complex production issues, take part in incident response and implement lasting fixes Mentor less experienced developers and contribute to documentation and team standards What You'll Need Essential: 5+ years ...

evident evidence systems Embed secure development, threat modelling, privacy, observability and third-party assurance into the lifecycle Build a production ownership model with SLOs, incident response and root-cause analysis Make sound build-versus-buy decisions and manage technical debt and platform risk Hire, lead and develop ...