Incident Response Engineer – UK SecOps (On‑Site, DV Cleared)

Google LLC; City of Westminster; On-site; GBP 90,000 - 130,000; Full time

Job summary

Google Public Sector is seeking an Incident Response Engineer for the UK Security Operations team based in Hampshire. The role involves delivering and operating private cloud security, monitoring and responding to incidents around the clock, with on-site requirements and occasional travel to London.

The successful candidate will work in a 24/7 SOC, participate in on-call rotations, and help build platform security efficiencies and dashboards alongside cross-functional teams.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Completed relevant industry course/certification offerings such as CEH, GIAC or CompTIA Sec+.
• 5 years of experience in SOC-related roles, responding to and addressing security incidents.
• Experience in technical troubleshooting and writing code in one or more programming languages.
• Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.

Responsibilities

• Respond to security incidents escalated from the front line 24x7x365 team.
• Build and develop security efficiencies on the platform to improve the overall SOC.
• Conduct threat hunting activities on the platform and participate in purple team events.
• Review and develop security operations center dashboards for anomalous activity.
• Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc.

Skills

SOC experience

Incident response

Troubleshooting

Code writing

DV clearance

Education

Bachelor's degree or equivalent

Job description

Google Public Sector is seeking an Incident Response Engineer for the UK Security Operations team based in Hampshire. The role involves delivering and operating private cloud security, monitoring and responding to incidents around the clock, with on-site requirements and occasional travel to London.

The successful candidate will work in a 24/7 SOC, participate in on-call rotations, and help build platform security efficiencies and dashboards alongside cross-functional teams.