SOC Engineer – SIEM & Automation Specialist

About the role

We are looking for a hands‑on SOC Engineer to join our growing Cyber Security Operations Centre. You will focus on building, maintaining and optimising the tools, telemetry, detections and automation that enable our SOC analysts to identify and respond to threats efficiently.

Key responsibilities

• Administer and optimise Microsoft Sentinel (or equivalent SIEM) – log ingestion, parsing, normalisation and retention.
• Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash and KQL.
• Onboard and manage security telemetry from diverse data sources.
• Design, implement and tune detection rules to improve alert quality and reduce false positives.
• Conduct proactive threat hunting using SIEM, EDR and threat‑intelligence feeds.
• Support incident investigations, containment and response activities.
• Monitor health of SOC tooling, sensors, agents and log pipelines.
• Produce documentation, runbooks and operational procedures.

Required profile

• Proven experience engineering and supporting SIEM platforms, preferably Microsoft Sentinel.
• Strong scripting and automation background (Python, PowerShell, Bash, KQL).
• Experience with SOAR technologies and security automation.
• Solid understanding of Windows and Linux logging, networking (TCP/IP, DNS, firewalls, proxies) and cloud security monitoring (Azure, AWS, Microsoft 365).
• Familiarity with MITRE ATT&CK, CVEs, vulnerability management and threat hunting.
• Background in a SOC, NOC or 24/7 operational environment.

Required skills

• Microsoft Sentinel
• Azure Logic Apps
• Python
• PowerShell
• Bash
• KQL
• SOAR
• Detection engineering
• Threat hunting
• Windows logging
• Linux logging
• TCP/IP
• DNS
• Firewalls
• Proxies
• MITRE ATT&CK
• CVEs
• Vulnerability management
• Azure
• AWS
• Microsoft 365

What we offer

• Opportunity to work in a mature, growing SOC environment.
• Exposure to a wide range of customer sectors and technologies.
• Security clearance sponsorship for eligible candidates.
• Clear pathways to contribute to automation, detection engineering and SOC improvement initiatives.
• Shift rota including evenings, weekends and on‑call support.