Incident Response Engineer, UK Security Operations, Hampshire

Overview

In this role you will support 24/7/365 security operations for Google Public Sector, protecting private cloud deployments for critical customers. You will work with cross-functional teams to monitor, detect, and respond to incidents, while driving platform efficiencies and SOC improvements. You will conduct threat hunting and participate in purple team exercises to strengthen defenses. This position combines hands-on incident response with safeguarding high-security environments and ongoing platform optimization.

Responsibilities

• Respond to escalated security incidents 24/7/365 and coordinate rapid resolutions
• Build and optimize platform efficiencies to enhance SOC effectiveness
• Conduct threat hunting and participate in purple team events
• Review and develop SOC dashboards to detect anomalous activity
• Operate and secure private cloud deployments for public sector clients
• Collaborate with product teams to improve security tooling and processes
• Participate in rotating on-call schedule and on-site operations

Key requirements

• Bachelor’s degree or equivalent practical experience
• 5 years of experience in SOC-related roles
• Experience in technical troubleshooting and programming in one or more languages
• Active or ability to obtain Developed Vetting (DV) UK security clearance
• Completed CEH, GIAC or CompTIA Sec+ certifications

• Excellent problem-solving
• Investigative mindset
• Vulnerability management
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM)
• Incident response

…