Mid to Senior SOC Engineer – Hybrid (Cambridge)

About the role

We are partnering with a fast‑growing cyber security business that is relocating its Security Operations Centre to the UK. The Mid to Senior SOC Engineer will work hands‑on across SOC operations and engineering, supporting key clients while shaping tooling, processes and detection capabilities.

Key responsibilities

• Proactive security monitoring and threat hunting.
• Investigating and responding to security incidents.
• Engineering and improving SIEM environments.
• Building and tuning detection rules.
• Developing detection coverage around MITRE ATT&CK.
• Supporting and maintaining client security platforms.
• Scripting and automating SOC processes.
• Helping develop and mature the UK SOC capability.

Required profile

• Strong SOC / Security Operations experience.
• Hands‑on SIEM engineering experience.
• Detection engineering and alert tuning expertise.
• Experience with KQL, SQL or similar query languages.
• Linux operating‑system experience.
• Threat hunting and incident response background.
• Scripting/automation using Python and/or PowerShell.
• Exposure to SOAR platforms, playbooks or security automation.
• Comfortable working directly with clients and taking ownership of technical issues.

Required skills

• SIEM engineering
• KQL
• SQL
• Linux
• Python
• PowerShell
• SOAR

What we offer

• Salary up to £80,000 depending on experience.
• 25 days holiday.
• On‑site parking.
• Hybrid working with flexibility (3 days onsite).
• Significant opportunity to shape and grow the SOC function.