10 of 10 Incident Response Jobs in Somerset

will play a key role in detecting, investigating and responding to cyber threats, while helping to improve the organisation's overall security monitoring and incident response capabilities. The role combines hands-on security operations, tooling optimisation and continuous improvement across a varied technology estate. Key responsibilities: Monitor, triage … investigate security alerts and incidents across IT, cloud and OT environments. Lead or support incident response, including containment, eradication, recovery and escalation. Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

/defence environmentsDesirable:Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

maintenanceOperational support of platform services (e.g. PAM, PKI, cross-domain solutions) in live environmentsPlatform administration including patching, upgrades, configuration, and account managementMonitoring, alerting, and incident response for platform servicesIncident and problem management, including troubleshooting and root cause analysisNetworking concepts (TCP/IP, DNS, DHCP, firewalls)Automation and scripting … services, or cross-domain/secure transfer solutionsUse of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)ITIL-aligned service management practices (incident, problem, change)Automation of operational activities (scripts, scheduled jobs, runbooks)Experience working in high-availability or 24/7 service environmentsIntegration with enterprise services (Active ...

maintaining security management plans, assurance evidence, control records or equivalent security artefacts. Understanding of secure system operation, change control, access control, protective monitoring and incident response principles. Ability to work with technical teams, system owners and security specialists to assess whether controls are being applied effectively. Willingness ...

similar risk-focused environment.Strong understanding of insider risk scenarios, including data loss, privileged access misuse, policy violations and account compromise.Experience supporting investigations, incident response, risk assessments or security monitoring activities.Ability to analyse data, security alerts and behavioural trends to identify risks and control gaps.Strong stakeholder management and communication ...

Cyber Security Operations Apprentice, you will help protect IT, OT and cloud systems by monitoring security alerts, supporting investigations and assisting with incident response. You'll use security tools to identify risks, record findings and develop practical cyber security skills while working alongside experienced professionals. Role Help monitor security ...

design scalable, resilient systems and take ownership beyond simply delivering tickets. You will take ownership across system design, architecture, CI/CD, observability, incident response and production systems, working closely with Engineering, Product and Operations teams to build and continuously improve reliable platforms. Required Skills: Strong backend engineering ...