Cyber Security Incident Co-Ordinator

Job Description:

Help protect some of the UK's most critical Defence systems

At DXC Technology, we deliver secure technology solutions that support some of the UK's most important Defence organisations. We have an opportunity for a Cyber Security Incident Co-Ordinator to join our Security Advice and Incident Office (SAIO) based in Corsham or Erskine (Scotland), you'll play a vital role in protecting mission-critical environments by coordinating and managing security incidents across MODNET systems.

This is an exciting opportunity for someone who enjoys problem solving, thrives in a fast-paced operational environment and wants to build a career in Cyber Security. Working alongside experienced security professionals, you'll become a trusted point of contact for Defence customers, helping to investigate incidents, improve security processes and strengthen the resilience of highly secure environments. We're passionate about building diverse, inclusive teams and actively encourage applications from women, underrepresented groups and neurodivergent candidates. We recognise that everyone brings different experiences and perspectives, and we're committed to creating an inclusive recruitment process with support and reasonable adjustments available throughout.

No two days are the same. You'll work with technical specialists, cyber security teams and Defence stakeholders to ensure incidents are managed professionally from initial triage through to resolution, while continuously identifying opportunities to improve services and reduce future risk.

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

What you'll be doing

As a Cyber Security Incident Co-ordinator, you'll take ownership of the end-to-end security incident lifecycle, ensuring incidents are investigated, managed and resolved effectively while maintaining the highest levels of customer service.

Your responsibilities will include:

• Coordinating and managing security incidents from initial triage through to investigation and closure.

• Reviewing alerts, security logs and incident data to identify potential threats and determine appropriate actions.

• Working closely with internal resolver groups and specialist cyber security teams, including Threat Hunting, Security Engineering, Digital Forensics and the Cyber Threat Advisory Centre (CTAC).

• Providing operational security advice and guidance to customers and internal stakeholders.

• Escalating complex or high-priority incidents to the appropriate teams where required.

• Producing clear and accurate incident reports, dashboards and management information using Microsoft Excel and PowerPoint.

• Monitoring security trends, identifying recurring issues and making recommendations to improve processes, reduce risk and enhance overall security.

• Supporting the management of customer security directives, operational procedures and governance activities.

• Coordinating security administration activities, including engineering password controls and associated security validation processes.

• Acting as an escalation point and providing guidance to colleagues when managing complex or sensitive incidents.

• Reviewing and continuously improving operational processes to ensure lessons learned are captured and embedded.

• Supporting weekly and monthly reporting against contractual obligations and service level agreements.

• Participating in an on-call rota to support high-severity security incidents outside normal working hours.

What we're looking for

We're looking for someone who is naturally curious, analytical and enjoys working collaboratively to solve complex problems.

You'll be someone who remains calm under pressure, communicates confidently with a wide range of stakeholders and is passionate about developing your cyber security knowledge.

You'll ideally have:

• An interest in Cyber Security and Security Incident Management, with a genuine desire to continue learning and developing.

• Strong analytical and investigative skills with excellent attention to detail.

• A good understanding of Defence environments and secure customer operations.

• Excellent communication and stakeholder management skills, with the confidence to engage at all levels.

• The ability to make sound decisions under pressure and manage multiple priorities effectively.

• Experience producing reports, procedures or operational documentation.

• A proactive, organised approach and the ability to work both independently and as part of a collaborative team.

It would be great if you also have

• Experience working within Defence, Government, the Civil Service, Police or other secure environments.

• Previous experience coordinating or investigating security incidents.

• Knowledge of current cyber security threats, vulnerabilities and emerging attack techniques.

• Experience working within operational cyber security, security operations or secure service environments.

• A passion for continuous improvement and developing both yourself and those around you.

Why join DXC Technology?

At DXC Technology, you'll be part of a team delivering services that genuinely make a difference.

In addition, DXC offers a competitive salary and a flexible benefits package designed to support you both professionally and personally — including pension, private medical cover, and wellbeing programmes.

Ready to make a real difference?

If you're looking for a role where your work directly supports the security of critical UK Defence services, where you'll be challenged, supported and encouraged to develop your cyber security career, we'd love to hear from you.

Bring your curiosity, your analytical mindset and your passion for protecting critical environments—and help shape the future of secure technology at DXC Technology.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.