12 of 12 Incident Response Jobs in Somerset

will play a key role in detecting, investigating and responding to cyber threats, while helping to improve the organisation's overall security monitoring and incident response capabilities. The role combines hands-on security operations, tooling optimisation and continuous improvement across a varied technology estate. Key responsibilities: Monitor, triage … investigate security alerts and incidents across IT, cloud and OT environments. Lead or support incident response, including containment, eradication, recovery and escalation. Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. ...

projects, migrations and technology refresh programmes. Manage the security of the infrastructure through appropriate change, configuration and release-management processes. Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness. PERSON SPECIFICATION (essential requirements) Qualifications Educated ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

/defence environmentsDesirable:Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

/defence environmentsDesirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

Essential: 3+ years' experience in a cyber security role. Experience with Microsoft 365, Entra ID, Purview, endpoint security, SIEM, and vulnerability management. Experience in incident response and security monitoring. Knowledge of ISO 27001, GDPR, and financial services regulatory requirements. Advanced security certifications such as CISSP, CISM, CCSP, GIAC ...

patterns. Implement monitoring, logging and observability solutions to improve platform visibility and operational performance. Drive infrastructure resilience, scalability, security and cost optimisation initiatives. Support incident response, troubleshooting and root cause analysis activities. Collaborate with cross-functional engineering teams to ensure successful delivery of platform and application services. Promote ...

maintenanceOperational support of platform services (e.g. PAM, PKI, cross-domain solutions) in live environmentsPlatform administration including patching, upgrades, configuration, and account managementMonitoring, alerting, and incident response for platform servicesIncident and problem management, including troubleshooting and root cause analysisNetworking concepts (TCP/IP, DNS, DHCP, firewalls)Automation and scripting … services, or cross-domain/secure transfer solutionsUse of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)ITIL-aligned service management practices (incident, problem, change)Automation of operational activities (scripts, scheduled jobs, runbooks)Experience working in high-availability or 24/7 service environmentsIntegration with enterprise services (Active ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

similar risk-focused environment.Strong understanding of insider risk scenarios, including data loss, privileged access misuse, policy violations and account compromise.Experience supporting investigations, incident response, risk assessments or security monitoring activities.Ability to analyse data, security alerts and behavioural trends to identify risks and control gaps.Strong stakeholder management and communication ...

design scalable, resilient systems and take ownership beyond simply delivering tickets. You will take ownership across system design, architecture, CI/CD, observability, incident response and production systems, working closely with Engineering, Product and Operations teams to build and continuously improve reliable platforms. Required Skills: Strong backend engineering ...