Own the incident, not just the alert.

If you’re ready to move beyond repetitive triage and start owning incidents end-to-end, this is that step.

We’re working with a national MSP that’s investing heavily in its Security Operations capability, and they’re looking for a SOC/Incident Responder to help strengthen how they detect, manage, and respond to cyber threats across their clients.

You’ll be the person who brings calm to the chaos when incidents kick off, leading response efforts, coordinating across teams, and driving continuous improvement in how the SOC operates.

What you’ll be doing

Act as the primary escalation point for major incidents within the SOC.

Coordinate triage, containment, and response activities across MDR and SOC teams.

Drive incident documentation, reporting, and post-incident reviews.

Improve response processes, playbooks, and escalation paths.

Collaborate with engineering and operations to lift the overall security maturity.

What you’ll bring

Experience working in a SOC, MSSP, or Incident Response environment.

Strong grasp of SIEM and EDR tooling (Microsoft Sentinel / Defender ideal).

Ability to manage incidents with composure and communicate clearly under pressure.Balanced mix of technical capability and stakeholder skills.

Desire to move into a role with greater ownership and leadership responsibility.

Why this role?

You’ll actually own incidents and outcomes, not just pass tickets up the chain.

Clear career progression into leadership or IR management.

Strong backing from leadership investing in tooling and training.

Modern stack, collaborative team.