Cyber Security Incident Co-Ordinator

Help protect some of the UK's most critical Defence systems. At DXC Technology, we deliver secure technology solutions that support some of the UK's important Defence organisations. We have an opportunity for a Cyber Security Incident Co-Ordinator to join our Security Advice and Incident Office (SAIO) based in Corsham. You'll play a vital role in protecting mission-critical environments by coordinating and managing security incidents across MODNET systems.

This is an exciting opportunity for someone who enjoys problem solving, thrives in a fast-paced operational environment and wants to build a career in Cyber Security. Working alongside experienced security professionals, you'll become a trusted point of contact for Defence customers, helping to investigate incidents, improve security processes and strengthen the resilience of highly secure environments.

No two days are the same. You'll work with technical specialists, cyber security teams and Defence stakeholders to ensure incidents are managed professionally from initial triage through to resolution, while continuously identifying opportunities to improve services and reduce future risk.

Due to customer security clearance requirements candidates must be eligible for or currently hold vetting. Candidates must be sole UK national/British citizen and have resided in the UK for 10 years and over.

What you'll be doing

• Coordinating and managing security incidents from initial triage through to investigation and closure.
• Reviewing alerts, security logs and incident data to identify potential threats and determine appropriate actions.
• Working closely with internal resolver groups and specialist cyber security teams, including Threat Hunting, Security Engineering, Digital Forensics and the Cyber Threat Advisory Centre (CTAC).
• Providing operational security advice and guidance to customers and internal stakeholders.
• Escalating complex or high-priority incidents to the appropriate teams where required.
• Producing clear and accurate incident reports, dashboards and management information using Microsoft Excel and PowerPoint.
• Monitoring security trends, identifying recurring issues and making recommendations to improve processes, reduce risk and enhance overall security.
• Supporting the management of customer security directives, operational procedures and governance activities.
• Coordinating security administration activities, including engineering password controls and associated security validation processes.
• Acting as an escalation point and providing guidance to colleagues when managing complex or sensitive incidents.
• Reviewing and continuously improving operational processes to ensure lessons learned are captured and embedded.
• Supporting weekly and monthly reporting against contractual obligations and service level agreements.
• Participating in an on-call rota to support high-severity security incidents outside normal working hours.

What we're looking for

• Someone who is naturally curious, analytical and enjoys working collaboratively to solve complex problems.
• Someone who remains calm under pressure, communicates confidently with a wide range of stakeholders and is passionate about developing your cyber security knowledge.
• An interest in Cyber Security and Security Incident Management, with a genuine desire to continue learning and developing.
• Strong analytical and investigative skills with excellent attention to detail.
• A good understanding of Defence environments and secure customer operations.
• Excellent communication and stakeholder management skills, with the confidence to engage at all levels.
• The ability to make sound decisions under pressure and manage multiple priorities effectively.
• Experience producing reports, procedures or operational documentation.
• A proactive, organised approach and the ability to work both independently and as part of a collaborative team.

It would be great if you also have

• Experience working within Defence, Government, the Civil Service, Police or other secure environments.
• Previous experience coordinating or investigating security incidents.
• Knowledge of current cyber security threats, vulnerabilities and emerging attack techniques.
• Experience working within operational cyber security, security operations or secure service environments.
• A passion for continuous improvement and developing both yourself and those around you.

Why join DXC Technology?

At DXC Technology, you'll be part of a team delivering services that genuinely make a difference. In addition, DXC offers a competitive salary and a flexible benefits package designed to support you both professionally and personally — including pension, private medical cover, and wellbeing programmes.

Ready to make a real difference? If you're looking for a role where your work directly supports the security of critical UK Defence services, where you'll be challenged, supported and encouraged to develop your cyber security career, we'd love to hear from you.

Bring your curiosity, your analytical mindset and your passion for protecting critical environments—and help shape the future of secure technology at DXC Technology.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritises in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.