SOC Engineer

SOC Engineer - Cyber Security Operations

Up to £45,000

We're looking for a hands-on SOC Engineer to join a highly skilled Cyber Security Operations team, supporting customers across sectors including finance, manufacturing, utilities and retail.

Your work will involve helping maintain security tooling, improve visibility, support incident response and automate security operations across critical infrastructure.

The Role

• Operate, maintain and tune security monitoring and alerting platforms.
• Manage and optimise log ingestion and telemetry pipelines.
• Work with SOC Analysts to develop detection rules, alerts and playbooks.
• Support security incident investigation, response and containment.
• Automate repetitive SOC processes using scripting and automation.
• Onboard new systems and infrastructure into SOC monitoring.
• Support internal and customer cyber security engineering requirements.
• Maintain accurate technical documentation and operational procedures.
• Work with engineering teams to embed security monitoring into new infrastructure and services.

Key Skills

We're looking for experience across:

• Security monitoring, detection and response tooling
• PowerShell, Python or Bash
• Networking fundamentals - TCP/IP, DNS, firewalls and proxies
• Windows and Linux systems
• Log collection, monitoring and telemetry
• SOC, NOC or other 24/7 operational environments
• Detection logic, alert tuning and security playbooks
• Hybrid infrastructure - on-premises and cloud
• Security frameworks or structured detection methodologies

About You

You'll be a reliable, technically focused SOC Engineer with:

• Strong troubleshooting and analytical skills
• A proactive approach to security operations
• The ability to work effectively under pressure
• Good communication and documentation skills
• Flexibility to participate in an out-of-hours on-call rota
• The ability to obtain Security Clearance (SC)

This is an excellent opportunity to join a technically strong SOC where you'll work across security engineering, detection, automation and incident response, while gaining exposure to a diverse range of enterprise environments.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →