Incident Responder

Incident Responder – Softcat

Softcat invites you to join our Cyber Operations Team as an Incident Responder.

Success. The Softcat Way.

• SC clearance required upon hire.
• Shift pattern: 4 days on, 4 days off, 4 nights on, 4 off.

• Monitoring security alerts from platforms such as MS Sentinel, MS Defender and USM Anywhere.
• Providing in‑depth incident management and analysis to customers through monitoring, reporting and technical guidance for resolution while maintaining high ownership throughout the incident lifecycle.
• Interfacing with customers to resolve issues, provide additional information and answer questions related to incidents and monitoring.
• Maintaining high quality ticketing, SLA and KPI adherence.

• At least 2 years’ experience working in a SOC, preferably in an MSSP environment. Technical security roles outside a SOC are also considered.
• Ability to dynamically assess risks, threats and threat actors for new and existing customers.
• Significant incident‑response experience and knowledge of the NIST Incident Response Framework or an equivalent.
• A cyber‑security focused degree or related qualifications such as CompTIA SEC+, CySA+, Blue Team Level 1‑2, Microsoft SC‑200, or equivalent.
• Experience with SIEM tools such as MS Sentinel, Alien Vault, ELK, QRadar or similar.

• Hybrid working – 2 days in office, 3 days remote.
• Flexible hours – varying start and finish times to accommodate life commitments.
• Flexibility around school pick‑up and drop‑offs.

We acknowledge that confidence gaps and imposter syndrome are real. Don’t hesitate to apply – we would love to hear from you!

We celebrate individuality, encourage diverse perspectives and embrace every background. We provide support for disability or neurodiversity applicants and treat all application information with confidentiality.

Please apply now to become part of Softcat’s success story.