Security Command Centre - Onsite and Shift; Security Incident Management Analyst

About the job you’re considering

Cyber threats are evolving fast—and so are we. As part of our 24/7 Protective Monitoring team, you’ll be on the front lines defending critical systems and sensitive data for both government and commercial clients across the UK and Europe. You won’t just be watching alerts—you’ll be actively shaping the security posture of organizations that matter. This is your chance to build real-world experience with cutting-edge tools like SIEM and security automation platforms, all while working in a collaborative, mission-driven environment.

If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).

This role is 5 days onsite in Preston and is on shift.

As a Security Incident Management Analyst, your mission is to detect, investigate, and… you’ll:

• Monitor security systems for suspicious activity and emerging threats.
• Log and escape incidents using our incident management platform.
• Ensure the health and performance of monitoring tools.
• Collaborate with other analysts and support teams during investigations.
• Document findings clearly and contribute to continuous improvement.
• Help produce regular service reports and insights.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.

• A background in IT or cybersecurity (or a strong desire to grow in this field).
• Analytical thinking and a problem-solving mindset.
• Familiarity with incident, problem, or change management.
• Understanding of security principles and best practices.
• Strong communication and multitasking skills.

Nice-to-Have

Skills:

• Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel).
• Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS).
• Certifications like CompTIA Security+, Splunk certified user, Microsoft SC900 & SC200.
• Exposure to services like vulnerability management, PKI, anti-malware, and forensic analysis.

We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level
2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:
Declare they have a disability, andMeet the minimum essential criteria for the role. Please opt in during the application process.

If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).

Some roles will also require an additional level of security clearance:

Security Check (SC) Clearance:

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.

Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.

You’d be joining an accredited Great…