SOC Engineer

Security Engineer

Working pattern: Shift work as part of a 24/7 operation, with hybrid working offering two days per week from home

We’re looking for a Security Engineer who enjoys investigating threats, understanding what’s happened and helping clients respond.

You’ll work in our Security Operations Centre, analysing activity across client environments, investigating suspicious behaviour and improving the tools that help us detect and respond to threats.

We’re an engineering-led managed security services provider. Our engineers have a direct role in developing our services, so you’ll have opportunities to contribute ideas, improve how we work and see those improvements put into practice.

What you’ll be doing

You’ll combine security investigations with hands-on work across our tools and platforms. Your work will help clients understand what needs attention and what to do next.

Your responsibilities will include:

• Investigating threats. Analyse logs, connect events across different platforms and identify activity that needs further investigation or action.

• Explaining your findings. Keep clear investigation records and communicate what you’ve found to colleagues and clients.

• Supporting clients during incidents. Provide updates and practical remediation advice so customers understand the situation and their next steps.

• Looking after security tools. Deploy, maintain and improve SIEM, endpoint detection and response, and vulnerability management platforms.

• Building useful automation. Help automate routine operational tasks and response actions.

• Reviewing work with colleagues. Provide constructive peer review, share knowledge and help maintain the quality of our service.

• Keeping your knowledge current. Stay informed about emerging threats and attacker techniques, and bring useful ideas back to the team.

You’ll work shifts as part of our 24/7 security operation.

What we’re looking for

You’ll have demonstrable experience as a SOC analyst or engineer, with hands-on experience deploying, managing or operating security tools such as SIEM, EDR or SOAR platforms.

You’ll bring:

• A solid understanding of cyber security principles, common threats and attacker tactics.

• The ability to interpret log data, recognise suspicious behaviour and investigate it methodically.

• Clear communication, both in written documentation and conversations with clients.

• A practical approach to solving problems and improving how things work.

• The confidence to contribute ideas, ask questions and share what you learn.

• A willingness to work shifts and contribute to a team delivering support around the clock.

We’re looking for someone who takes care over the detail, follows an investigation through and understands the importance of keeping people informed.

Experience that would help

We’d also welcome:

• Experience working for a managed security services provider.

• Experience with AWS, Azure or Google Cloud.

• Experience supporting complex technical environments.

• Relevant SIEM or EDR vendor certifications.

• Industry qualifications such as CySA+ or Security Blue Team Level 1 or 2.

What you can expect

A hands-on role where you’ll work on real security threats, build your technical experience and contribute to the tools and services the team uses every day.

You’ll work alongside engineers who share knowledge and welcome ideas, with scope to take on more as your skills develop.

Benefits include:

• Competitive salary.

• 32 days’ annual leave, plus birthday leave.

• Private healthcare.

• Electric car scheme.

• Private pension scheme.

• Hybrid working, with two days per week from home.

If you enjoy getting into the detail, working through security problems and helping clients respond with confidence, we’d like to hear from you.