Incident Response Engineer - 24/7 UK SecOps (Private Cloud)

Google; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Google Public Sector's UK Security Operations (SecOps) team seeks a seasoned SOC professional to monitor, respond to, and secure private cloud deployments. You will operate 24/7/365, escalating incidents and driving platform efficiencies across EDR/SIEM ecosystems.

The role covers threat hunting, on-call rotations outside core hours and occasional travel to London, supporting high-security private cloud services for critical customers.

Qualifications

• Bachelor's degree or equivalent practical experience.
• CEH/GIAC/CompTIA Sec+ certifications.
• 5+ years in SOC roles addressing security incidents.
• Experience troubleshooting and coding in one or more languages.
• Eligibility for Developed Vetting (DV) UK security clearance.

Responsibilities

• Respond to security incidents escalated from the front line 24x7x365 team.
• Build and develop security efficiencies on the platform to improve the SOC.
• Conduct threat hunting activities and participate in purple team events.
• Review and develop SOC dashboards for anomalous activity.
• Demonstrate SME across security disciplines, EDR, SIEM, and related tools.

Skills

Programming

Troubleshooting

Threat hunting

Incident response

Problem solving

Kubernetes incident response

EDR/SIEM familiarity

Security incident analysis

Education

Bachelor's degree or equivalent practical experience

CEH/GIAC/CompTIA Sec+ certification

DV UK security clearance eligibility

5 years SOC incident response experience

Tools

Kubernetes

Job description

Google Public Sector's UK Security Operations (SecOps) team seeks a seasoned SOC professional to monitor, respond to, and secure private cloud deployments. You will operate 24/7/365, escalating incidents and driving platform efficiencies across EDR/SIEM ecosystems.

The role covers threat hunting, on-call rotations outside core hours and occasional travel to London, supporting high-security private cloud services for critical customers.