SOC Engineer

Salary: £40,000 - 45,000 per year

Requirements:

• Proven platform engineering experience with Microsoft Sentinel and Azure Logic Apps, or equivalent SIEM/SOAR platforms
• Proficiency in Python, PowerShell, Bash, and KQL
• Deep understanding of Windows and Linux logging, including Event Logs and Syslog
• Strong knowledge of network security protocols, including TCP/IP, DNS, and firewalls
• Prior experience working within a SOC, NOC, or 24/7 operational environment
• Desirable certifications include Microsoft SC-200, SANS GCIA, EC-Council CEH, ISC2 CISSP/CC, CompTIA CySA+/Security+, Fortinet NSE, or Cisco CyberOps
• A systems-thinking mindset with the ability to connect tools and data feeds into a unified detection ecosystem
• Strong collaboration skills for working with Infrastructure Engineers and SOC Analysts
• An autonomous and methodical approach to problem-solving and deadline management in a fast-paced environment

Responsibilities:

• Build, maintain, and optimize internal data pipelines, SIEM environments, and automation tools
• Deploy and optimize Microsoft Sentinel, including log ingestion, parsing, normalization, and data retention
• Build automation playbooks using Azure Logic Apps, Python, PowerShell, Bash, and KQL to streamline workflows
• Write and tune detection rules, including Sigma rules, to reduce false positives
• Proactively hunt for indicators of compromise
• Assist with breach investigations across internal networks and external customer environments
• Triage incidents through containment and eradication
• Ensure infrastructure engineering and data tasks align with ISO 27001, ISO 9001, and ISO 22301 compliance frameworks

Technologies:

• Azure
• Bash
• Cisco
• Support
• Linux
• Network
• PowerShell
• Python
• Security
• TCP/IP
• Windows
• Cloud

More:

We are seeking a specialist, hands-on SOC Engineer for a leading international technology solutions provider serving sectors such as Finance, Retail, and Utilities. This is a dedicated engineering role focused on strengthening the data pipelines, SIEM environments, and automation capabilities that support analyst response to critical threats. The role is shift-based and includes evenings, weekends, and bank holidays. The position is based in person, and the salary range is £40,000 to £45,000 per year.

last updated 31 week of 2026