5 of 5 Incident Response Jobs in Somerset

will play a key role in detecting, investigating and responding to cyber threats, while helping to improve the organisation's overall security monitoring and incident response capabilities. The role combines hands-on security operations, tooling optimisation and continuous improvement across a varied technology estate. Key responsibilities: Monitor, triage … investigate security alerts and incidents across IT, cloud and OT environments. Lead or support incident response, including containment, eradication, recovery and escalation. Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

maintaining security management plans, assurance evidence, control records or equivalent security artefacts. Understanding of secure system operation, change control, access control, protective monitoring and incident response principles. Ability to work with technical teams, system owners and security specialists to assess whether controls are being applied effectively. Willingness ...

design scalable, resilient systems and take ownership beyond simply delivering tickets. You will take ownership across system design, architecture, CI/CD, observability, incident response and production systems, working closely with Engineering, Product and Operations teams to build and continuously improve reliable platforms. Required Skills: Strong backend engineering ...