SOC Engineer

We recruiting for an exciting opportunity within a highly regulated environment. We're looking forSOC Engineers(both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities.

This isn't a pure triage/analyst role we needengineerswho can build, tune, automate, and scale our detection platform.

What you'll be doing:

\n
• Engineering and maintainingMicrosoft Sentinel,Defender XDR, andLog Analyticsplatforms
\n
• Onboarding and normalising log sources across hybrid/cloud environments
\n
• Writing and tuningKQL detection rulesand analytics logic
\n
• BuildingSOAR playbooks(Logic Apps, automation workflows) to reduce manual effort
\n
• Managing telemetry ingestion, parsers, and data retention for cost optimisation
\n
• Producing platform health reports and identifying coverage gaps
\n
• Mentoring junior engineers and contributing to team development
\n
• Acting as technical SME during incidents
\n

What we're looking for:

Deep experience withMicrosoft Sentinel,Defender suite, andKQL

Strong scripting/automation skills (PowerShell, Python, Logic Apps)

Solid understanding ofMITRE ATT&CK,NCSC CAF,NIST CSF

Stakeholder management able to translate technical complexity to non-technical audiences

Degree in Computer Science, Cyber Security, or equivalent

Desirable:SC-200 / AZ-500, ServiceNow SecOps, regulated sector experience (nuclear/defence/CNI).

What's in it for you:

\n
• 30 days annual leave (+ bank holidays)
\n
• Hybrid working - flexible on-site
\n
• Opportunity to shape SOC engineering strategy in a critical environment
\n
• Clear progression pathway (Junior ? Senior ? Lead)
\n
• Certifications and training budget (SC-200, AZ-500, etc.)
\n
• Work with cutting-edge Microsoft security tech
\n

JBRP1_UKTJ