SOC Engineer

We recruiting for an exciting opportunity within a highly regulated environment. We're looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities.This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform.What you'll be doing:Engineering and maintaining Microsoft Sentinel , Defender XDR , and Log Analytics platformsOnboarding and normalising log sources across hybrid/cloud environmentsWriting and tuning KQL detection rules and analytics logicBuilding SOAR playbooks (Logic Apps, automation workflows) to reduce manual effortManaging telemetry ingestion, parsers, and data retention for cost optimisationProducing platform health reports and identifying coverage gapsMentoring junior engineers and contributing to team developmentActing as technical SME during incidentsWhat we're looking for:Deep experience with Microsoft Sentinel , Defender suite , and KQLStrong scripting/automation skills ( PowerShell, Python, Logic Apps )Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSFStakeholder management able to translate technical complexity to non-technical audiencesDegree in Computer Science, Cyber Security, or equivalentDesirable: SC-200 / AZ-500, ServiceNow SecOps, regulated sector experience (nuclear/defence/CNI).What's in it for you:30 days annual leave (+ bank holidays)Hybrid working - flexible on-siteOpportunity to shape SOC engineering strategy in a critical environmentClear progression pathway (Junior ? Senior ? Lead)Certifications and training budget (SC-200, AZ-500, etc.)Work with cutting-edge Microsoft security techTPBN1_UKTJ