On-Site Incident Response Engineer – UK SecOps (DV)

Google LLC; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Google Public Sector is seeking a security operations professional to join the SecOps team in the UK. The role focuses on delivering, operating, and securing private cloud deployments with high security requirements for critical customers.

You will monitor, detect, and investigate security incidents around the clock, participate in 24/7/365 coverage, and rotate on-call outside core hours and weekends to ensure rapid incident response.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Completed relevant industry course/certifications such as CEH, GIAC or CompTIA Sec+.
• 5 years of experience in SOC-related roles, responding to and addressing security incidents.
• Experience in technical troubleshooting and writing code in one or more programming languages.
• Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.

Responsibilities

• Respond to security incidents escalated from the front line 24x7x365 team.
• Build and develop security efficiencies on the platform to improve the overall SOC.
• Conduct threat hunting activities on the platform and participate in purple team events.
• Review and develop security operations center dashboards for anomalous activity.
• Demonstrate subject matter expert across typical security disciplines, vulnerability, EDR, SIEM, etc.

Skills

SOC experience

Programming

Troubleshooting

DV UK clearance

Education

Bachelor's degree or equivalent

CEH GIAC CompTIA Sec+ certifications

Tools

Kubernetes

EDR

SIEM

Job description

Google Public Sector is seeking a security operations professional to join the SecOps team in the UK. The role focuses on delivering, operating, and securing private cloud deployments with high security requirements for critical customers.

You will monitor, detect, and investigate security incidents around the clock, participate in 24/7/365 coverage, and rotate on-call outside core hours and weekends to ensure rapid incident response.