On-Site Incident Response Engineer, UK SecOps

Google Inc.; United Kingdom; Remote; GBP 65,000 - 110,000; Full time

Job summary

Google Public Sector’s UK Security Operations team is seeking an Incident Response Engineer for on-site work in Hampshire, with occasional travel to London. You will join a 24/7/365 defensive operation, monitoring and responding to security incidents to protect private cloud deployments for high-security customers.

The role requires a mid-level professional with at least five years in SOC, a Bachelor's degree, and certifications such as CEH, GIAC, or CompTIA Sec+.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Completed relevant industry course/certification offerings such as CEH, GIAC or CompTIA Sec+.
• 5 years of experience in SOC-related roles, responding to and addressing security incidents.
• Experience in technical troubleshooting and writing code in one or more programming languages.
• Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.

Responsibilities

• Respond to security incidents escalated from the front line 24x7x365 team.
• Build and develop security efficiencies on the platform to improve the overall SOC.
• Conduct threat hunting activities on the platform and participate in purple team events.
• Review and develop security operations center dashboards for anomalous activity.
• Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Management (SIEM) etc.

Skills

SOC incident response

Threat hunting

EDR SIEM

Mentoring

Communication

Education

Bachelor's degree

Tools

SIEM

EDR

Kubernetes

Job description

Google Public Sector’s UK Security Operations team is seeking an Incident Response Engineer for on-site work in Hampshire, with occasional travel to London. You will join a 24/7/365 defensive operation, monitoring and responding to security incidents to protect private cloud deployments for high-security customers.

The role requires a mid-level professional with at least five years in SOC, a Bachelor's degree, and certifications such as CEH, GIAC, or CompTIA Sec+.