1 to 25 of 42 Incident Response Jobs in Northern Ireland

Manager to join our Digital Trust & Cyber Security practice. Working on behalf of our clients, you will lead Security Operations Centre (SOC) analysts and incident response specialists. You will combine hands‐on operational leadership with advisory work. This means managing live incident containment … minimum of two days per week, depending on the role and assignment. What you'll do Lead and develop SOC analysts and incident response specialists, providing clear operational direction, coaching and support across day‐to‐day security operations. Take a hands‐on leadership role during cyber security incidents ...

hiring a Level 3 SOC Analyst to join a leading cyber team where you'll be at the forefront of threat detection, incident response, threat hunting and SIEM engineering, working with cutting-edge Microsoft security technologies. What's in it for you? £60,000 salary Hybrid working with … opportunities Exposure to enterprise-scale security environments Work with the latest Microsoft security technologies Opportunity to mentor and develop Junior Analysts Involvement in complex incident response and threat hunting activities What You'll Be Doing Leading complex security investigations and incident response activities Conducting threat hunting ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. **Key Responsibilities:** * Design, build, and operate cloud‐native security controls as software products across cloud infrastructure, data platforms, and application … pipelines, and shared enterprise services* Integrate cloud security controls with SIEM and security tooling to generate high‐quality signals for detection, investigation, and incident response* Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery* Apply modern ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, andoperatecloud‐nativesecurity controls as software products across cloud infrastructure, data platforms, and application services Engineer andmaintaincloud …/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generatehigh‐qualitysignals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery Apply modern ...

Continuously improve the L3 support process. Work closely with product engineering teams to feed issues back into development backlogs, and with Client Success on incident communication. Incident response: Serve as member of the incident response team for production incidents, leading diagnostics and technical investigations. Skills ...

expertise to help maintain the availability, performance, and reliability of our critical SaaS applications. In this role, you will own and drive automation, monitoring, incident response, and infrastructure improvements across our multi-cloud, multi-region environment, working closely with senior engineering and cross-functional teams. What …/node failures, deployment rollbacks, ingress and networking issues, and resource/autoscaling problems. Participate in an on-call rotation (including weekends) and drive incident response from detection through resolution, with a primary focus on customer experience and minimizing impact. Drive improvements to disaster recovery, failover, and incident ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. Perform advanced event and incident analysis, including baseline establishment and trend analysis. Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident ...

will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Senior SOC Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks while mentoring analysts and being their escalation point. You will help provide security metrics, threat landscape updates and emerging trends. This role requires both deep analytical skills for threat detection and response, as well as technical engineering ...

Glance Founding UK member of the security organisation at a fast-growing, next-generation cloud security platform Specialism in MDR, detection engineering, incident response, and cloud threat analysis (AWS, GCP, or Azure) Hybrid, Belfast-based ... 3 days per week in office ... must already be based … confident engaging directly with customers under pressure. Key Responsibilities Own UK-hours MDR coverage independently, taking end-to-end responsibility for monitoring, triage, and response Lead in-depth security investigations across supply chain, API, malware, and runtime attack scenarios, documenting outcomes and building playbooks Handle complex and critical incidents ...

designed to ensure ongoing compliance with privacy laws globally The legal aspects of information security and data management to meet legal and regulatory requirements Incident response and remediation Dealing with individual rights requests Data export restrictions and data localisation requirements with a view to preserving international data flows … technology and data innovations, including AI governance, to help ensure good data handling practices and privacy by design Providing advice and support on data incident response Responding to individual rights requests Advising and guiding colleagues across the firm on privacy and data protection issues and policies Conducting ...

firm’s AI strategy and internal deployment The legal aspects of information security and data management to meet legal and regulatory requirements Incident readiness, response and remediation Working closely with fee earners, IT and others on technology and data innovations to ensure privacy and information security by design … help ensure good data handling practices and privacy by design Responding to and advising on individual rights requests Providing advice and support on data incident response Advising and guiding colleagues across the firm on privacy, information security and AI issues, policies and best practice Developing and delivering training ...

firm’s AI strategy and internal deployment The legal aspects of information security and data management to meet legal and regulatory requirements Incident readiness, response and remediation Working closely with fee earners, IT and others on technology and data innovations to ensure privacy and information security by design … help ensure good data handling practices and privacy by design Responding to and advising on individual rights requests Providing advice and support on data incident response Advising and guiding colleagues across the firm on privacy, information security and AI issues, policies and best practice Developing and delivering training ...

primary escalation point for production issues, work alongside engineering to resolve complex problems, and use AI tooling to remove repetitive work. DUTIES/RESPONSIBILITIES Incident and Escalation Response Serve as the escalation point for frontline support, owning complex production issues end to end from triage through resolution … client communication Participate in major incident response, providing impact analysis and actionable recommendations Monitor system performance and availability, resolving issues before they impact clients Manage production access and support configuration and change management activities Automation and AI Tooling Use AI tooling to accelerate investigation, including log analysis, data ...

pipelines for database provisioning, schema changes, migrations, and configuration management. Partner with product engineering, SRE, security, and cloud teams to define SLAs/SLOs, incident response, root cause analysis, and risk mitigation. Establish monitoring, alerting, and observability for database health and performance. Drive proactive incident prevention. Define … access, security, backups, and compliance. Participate in design reviews, capacity planning, and product inception to translate feature requirements into scalable data solutions. Lead post-incident reviews and continuous improvement initiatives to reduce mean time to detect and recover. Represent the database platform across cross-functional initiatives and influence long ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

Consulting is seeking a Security Operations Manager to lead SOC analysts and incident responders within our Digital Trust & Cyber Security practice. You will guide live incident containment and day-to-day SOC operations while helping clients modernise SIEM, SOAR and EDR capabilities. You’ll work across sectors, advise … tooling, develop incident playbooks, and coach teams in a hybrid, collaborative environment with a focus on client impact and security excellence. #J-18808-Ljbffr ...

engineers, with a clear path toward technical or team leadership as the U.K. presence scales. Responsibilities Assist in fine-tuning Upwind's detection and response mechanisms. Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements. Lead and conduct in-depth security investigations, including … best practices in cloud security. Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency. Requirements Based in Belfast, NI. This is a hybrid, in-office, 3 days per week role; visa sponsorship is not available. You must ...

critical business services and processes, assess operational impacts and dependencies, define recovery requirements and develop practical Business Continuity arrangements aligned with existing crisis management, incident management and service recovery frameworks. The role will apply strong Business Analysis and consultancy skills to facilitate stakeholder engagement, analyse business processes and dependencies … applicable. Translate BIA and dependency analysis into practical Business Continuity Plans and recovery arrangements, ensuring appropriate ownership, roles, escalation and communications and alignment with incident response, crisis management and IT service recovery arrangements. Maintain plans through appropriate review, approval, validation and change processes. Identify resilience gaps, risks, control ...

technical partnerships across observability, analytics, security, and cloud platform ecosystems. Provide executive‐level communication, roadmap updates, and operational health reporting to senior leadership. Lead incident response efforts for critical telemetry services and ensure continuous improvement through post‐incident learning and resiliency engineering. Establish telemetry cost transparency, chargeback ...

tooling Improving system reliability, observability, and cost-efficiency across environments Modernising CI/CD practices to enable safe, rapid delivery across multiple environments Supporting incident response and improving operational visibility through monitoring, logging, and tracing Mentoring junior engineers and contributing to engineering standards and design reviews What ...

with Microsoft Defender, Intune, Sentinel or similar security platforms. Experience supporting firewalls, backup solutions, monitoring tools and remote management platforms. Exposure to vulnerability management, incident response or recognised security frameworks. PowerShell or scripting experience. Relevant IT, Networking or Cybersecurity qualifications. What You'll Get in Return Competitive salary ...

contract templates — including NDAs and trial agreements — supporting technology transactions attorneys throughout the contract lifecycle. Assist cybersecurity and data privacy attorneys in managing the response to information security incidents and data privacy events, ensuring matters are handled with care and in line with regulatory requirements. Conduct legal research … corporate or law firm context. Background in technology transactions. Experience drafting or reviewing NDAs, trial agreements, or other technology-related contracts. Exposure to cybersecurity incident response or data privacy compliance processes, ideally within the financial services industry. Knowledge of or genuine interest in AI and emerging technology issues ...

Experience Experience supporting MOD security working groups or MOD Secure by Design accreditation processes. Experience developing in‐service cyber support plans and capabilities, including: Incident response plans Vulnerability management plans Security monitoring or operational support arrangements Security maintenance and update processes Understanding of software, hardware and embedded development ...

sessions, providing in-the-moment guidance without creating bottlenecks. Collaborate with the monitoring and observability strategy, ensuring architectural decisions support system health, traceability, and incident response. Work closely with the Security team to ensure solutions are built with defence-in-depth principles, security models and regulatory compliance in mind. ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...