SOC Engineer – Security Operations (Remote/Hybrid)

About the role

We are seeking a SOC Engineer to join a public sector client in London on a 6‑month contract. The role is primarily remote with occasional on‑site visits. You will work within the security operations centre, monitoring, detecting and responding to threats across the organisation's estate.

Key responsibilities

• Operate and maintain the SIEM platform (Splunk) to collect and analyse security events.
• Develop and optimise log pipelines using Cribl.
• Perform threat hunting and incident response activities.
• Create and tune detection rules to improve coverage.
• Collaborate with other security teams to enhance SOC processes.
• Produce reports and documentation for senior management.
• Ensure compliance with security policies and standards.

Required profile

• Proven experience working in a SOC environment at a mid‑senior level.
• Hands‑on expertise with Splunk and Cribl.
• Ability to work independently on complex security issues.
• Eligibility for SC clearance or ability to obtain it.
• Strong analytical and problem‑solving skills.

Required skills

• Splunk
• Cribl
• SIEM
• Log management
• Security monitoring
• Threat detection
• Incident response

What we offer

• Competitive daily rate up to £450 (outside IR35).
• 6‑month contract with possibility of extension.
• Mostly remote working with occasional London visits.
• Opportunity to work on high‑impact public sector projects.
• Support for obtaining SC clearance.