1 to 25 of 39 Incident Response Jobs in Northern Ireland

based in Belfast. They will perform a critical role in solidifying the firm's security posture, focusing on the in-depth analysis, and effective response to cyber security events and incidents within their time-zone. They will also contribute to the effectiveness and cohesion of the Cyber Defence team … firm’s Managed Security Service Provider (MSSP) to identify potential incidents. Assist and advise junior colleagues during investigations where additional experience is required. Incident Response Conduct initial triage and investigation of confirmed incidents. Perform containment, mitigation, and remediation activities for incidents, ensuring that any required forensic evidence ...

implementation through deployment and production support and are accountable for the reliability, adoption, and effectiveness of cloud security controls, including their role in incident detection, response, and recovery. Key Responsibilities: Design, build, andoperatecloud‐nativesecurity controls as software products across cloud infrastructure, data platforms, and application services Engineer andmaintaincloud …/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generatehigh‐qualitysignals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery Apply modern ...

expertise to help maintain the availability, performance, and reliability of our critical SaaS applications. In this role, you will own and drive automation, monitoring, incident response, and infrastructure improvements across our multi-cloud, multi-region environment, working closely with senior engineering and cross-functional teams. What …/node failures, deployment rollbacks, ingress and networking issues, and resource/autoscaling problems. Participate in an on-call rotation (including weekends) and drive incident response from detection through resolution, with a primary focus on customer experience and minimizing impact. Drive improvements to disaster recovery, failover, and incident ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. Perform advanced event and incident analysis, including baseline establishment and trend analysis. Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path.You will be guided by Threat Intelligence which … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. • Perform advanced event and incident analysis, including baseline establishment and trend analysis.• Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours• Support Major Incident ...

will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Senior SOC Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks while mentoring analysts and being their escalation point. You will help provide security metrics, threat landscape updates and emerging trends. This role requires both deep analytical skills for threat detection and response, as well as technical engineering ...

workflows to increase operational efficiency and reduce manual intervention.Evaluate system designs and architectures for reliability, performance, security, and efficiency, ensuring best practices are followed.Lead incident response efforts and conduct deep-dive root cause analysis to implement long-term, innovative technical solutions.Develop and maintain comprehensive runbooks and procedures … incident response and operational tasks.Collaborate with cross-functional teams to review and provide feedback on technical designs, ensuring alignment with SRE principles.Participate in on-call rotations and handle critical incidents with confidence and expertise.Continuously improve documentation for systems and services, contributing to a knowledge-sharing culture within ...

Shearman, based in Belfast, seeks a Senior Cyber Defence Analyst to join its Information Security team. The role focuses on in-depth analysis, incident response, and guiding junior colleagues within a global firm. Weekend working is a requirement with premium pay for weekend hours; you will be part … follow-the-sun model, supporting threat detection, response, and continuous improvement of cyber defence processes. #J-18808-Ljbffr ...

Glance Founding UK member of the security organisation at a fast-growing, next-generation cloud security platform Specialism in MDR, detection engineering, incident response, and cloud threat analysis (AWS, GCP, or Azure) Hybrid, Belfast-based ... 3 days per week in office ... must already be based … confident engaging directly with customers under pressure. Key Responsibilities Own UK-hours MDR coverage independently, taking end-to-end responsibility for monitoring, triage, and response Lead in-depth security investigations across supply chain, API, malware, and runtime attack scenarios, documenting outcomes and building playbooks Handle complex and critical incidents ...

technical expertise across Data and Database Security within complex enterprise environments Configure, maintain and optimise security platforms and policies Analyse security events and support incident response and root-cause analysis Troubleshoot complex technical and security issues Support the deployment and configuration of security solutions across on-premise …/NoSQL databases Understanding of Data or Database Security Cloud infrastructure and security , ideally within AWS, Azure or GCP Security engineering, technical troubleshooting or incident response Web and application security, including familiarity with the OWASP Top 10 Networking fundamentals including TCP/IP, HTTP/ ...

primary escalation point for production issues, work alongside engineering to resolve complex problems, and use AI tooling to remove repetitive work. Duties/Responsibilities Incident and Escalation Response Serve as the escalation point for frontline support, owning complex production issues end to end from triage through resolution … client communication Participate in major incident response, providing impact analysis and actionable recommendations Monitor system performance and availability, resolving issues before they impact clients Manage production access and support configuration and change management activities Automation and AI Tooling Use AI tooling to accelerate investigation, including log analysis, data ...

Capita in Belfast is seeking a Senior Major Incident Manager to lead the Major Incident Management team within a 24x7 incident response operation. You will coordinate complex incidents, ensure timely resolution within SLAs, and drive continuous improvement across Capita services. The role requires strong leadership, expertise … ITIL-aligned incident management, and the ability to mentor staff while collaborating with cross-functional teams. #J-18808-Ljbffr ...

observability of critical business applications and technology services Establish, monitor, and report on SLAs, SLOs, Error Budgets, availability, performance, and operational KPIs Lead Major Incident Management activities, coordinating cross-functional teams during outages and ensuring rapid service restoration and RCA completion Drive Problem Management by identifying recurring issues, analyzing … standards Lead continuous service improvement initiatives to reduce MTTR, increase stability, improve customer satisfaction, and enhance operational maturity Lead operational governance ceremonies, service reviews, incident and problem reviews, change governance forums, readiness assessments, stakeholder communications, and executive service reporting Create, maintain, review, and ensure compliance with runbooks, SOPs, knowledge ...

pipelines for database provisioning, schema changes, migrations, and configuration management. Partner with product engineering, SRE, security, and cloud teams to define SLAs/SLOs, incident response, root cause analysis, and risk mitigation. Establish monitoring, alerting, and observability for database health and performance. Drive proactive incident prevention. Define … access, security, backups, and compliance. Participate in design reviews, capacity planning, and product inception to translate feature requirements into scalable data solutions. Lead post-incident reviews and continuous improvement initiatives to reduce mean time to detect and recover. Represent the database platform across cross-functional initiatives and influence long ...

observability, and operational excellence of technology services while maintaining strong alignment with business objectives. This role serves as the primary owner of service health, incident and problem management, operational governance, continuous service improvement, and stakeholder engagement. The Service Manager partners closely with engineering, platform, infrastructure, security, and business teams … risk management, operational maturity, automation, and service improvements while ensuring adherence to established operational processes and governance standards. The role also provides leadership across incident, problem, change, release, and service management disciplines for a team of Service Analysts to deliver resilient, secure, and customer-focused services that meet organizational ...

desire to develop/deliver brilliant, industry redefining platforms as well as their own skills. We need you to be a cyber incident decision maker, responsible for ensuring that mitigation controls and incident response are appropriate. Providing security advice and remediation to Lines of Business within ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection. Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery. Toil ...

using tools like OpenTelemetry, Splunk, Prometheus, and Grafana. Establish and continuously improve metrics, logs, alerting strategies, SLIs, and SLOs to enable fast issue detection.Incident Response & Operations: Engage with urgency in live production incidents, take ownership of minor incidents, lead post-mortems, and ensure rapid system recovery.Toil Reduction & Automation: Actively ...

engineers, with a clear path toward technical or team leadership as the U.K. presence scales. Responsibilities Assist in fine-tuning Upwind's detection and response mechanisms. Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements. Lead and conduct in-depth security investigations, including … best practices in cloud security. Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency. Requirements Based in Belfast, NI. This is a hybrid, in-office, 3 days per week role; visa sponsorship is not available. You must ...

technical partnerships across observability, analytics, security, and cloud platform ecosystems. Provide executive‐level communication, roadmap updates, and operational health reporting to senior leadership. Lead incident response efforts for critical telemetry services and ensure continuous improvement through post‐incident learning and resiliency engineering. Establish telemetry cost transparency, chargeback ...

technical partnerships across observability, analytics, security, and cloud platform ecosystems. Provide executive-level communication, roadmap updates, and operational health reporting to senior leadership. Lead incident response efforts for critical telemetry services and ensure continuous improvement through post-incident learning and resiliency engineering. Establish telemetry cost transparency, chargeback ...

contract templates — including NDAs and trial agreements — supporting technology transactions attorneys throughout the contract lifecycle.Assist cybersecurity and data privacy attorneys in managing the response to information security incidents and data privacy events, ensuring matters are handled with care and in line with regulatory requirements.Conduct legal research and analytical work … enforcement within a corporate or law firm context.Background in technology transactions.Experience drafting or reviewing NDAs, trial agreements, or other technology-related contracts.Exposure to cybersecurity incident response or data privacy compliance processes, ideally within the financial services industry.Knowledge of or genuine interest in AI and emerging technology issues ...

Apex Fintech Solutions in Belfast is seeking a Senior SOC Analyst to join our Security Operations Center. You will lead threat detection, incident response, and tooling automation while mentoring other analysts and driving improvements across our security posture. You will work with SIEM, EDR, and cloud security tools ...

sessions, providing in-the-moment guidance without creating bottlenecks. Collaborate with the monitoring and observability strategy, ensuring architectural decisions support system health, traceability, and incident response. Work closely with the Security team to ensure solutions are built with defence-in-depth principles, security models and regulatory compliance in mind. ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...