SOC Engineer

SOC Engineer

Hybrid - Milton Keynes - 3 Days per Week

£40,000 - £45,000 + On Call

Must be Eligible for Security Clearance

We are looking for a hands-on SOC Engineer to join a highly skilled Cyber Security Operations Centre within a leading internationally advanced technology solutions provider.

Working across customers in sectors including Finance, Manufacturing, Utilities and Retail, you'll play a key role in maintaining and improving the technology, telemetry and automation that enables the SOC to detect, investigate and respond to cyber threats across critical infrastructure.

This is a technically focused role where you'll combine security operations with engineering, helping to strengthen monitoring capabilities, improve visibility and automate SOC processes.

Key Responsibilities

Operate, tune and support security monitoring and alerting platforms.

Maintain and optimise log ingestion pipelines across multiple data sources.

Develop and refine detection rules, alerts and playbooks with SOC Analysts.

Support security investigations, incident response and containment.

Automate repetitive SOC tasks using PowerShell, Python or Bash.

Onboard new services and infrastructure into SOC monitoring.

Troubleshoot internal and customer cyber engineering incidents.

Maintain technical documentation and operational procedures.

Work with engineering teams to improve security visibility and telemetry.

Experience Required

You'll have experience in a similar operational or security environment, with:

Hands-on experience supporting security operations, detection, response or log collection tools.

Scripting or automation experience using PowerShell, Python or Bash.

Strong networking knowledge, including TCP/IP, DNS, firewalls and proxies.

Working knowledge of Windows and Linux systems, particularly logging and monitoring.

Experience within a SOC, NOC or 24/7 operational environment.

Experience with alert tuning, detection logic or security playbooks.

Understanding of monitoring hybrid on-premises and cloud infrastructure.

Awareness of security frameworks and structured detection methodologies.</li...