Overview
£450 - £550 per day | Outside IR35 | Hybrid (3 days in Bristol)
We are seeking a DV-cleared SOC Engineer to support and enhance a Security Operations Centre for a leading technology provider. This role focuses on detection engineering, SIEM optimisation, and automation, alongside supporting incident response across complex environments.
Responsibilities
- Develop and tune SIEM detection rules and use cases (e.g., Splunk, QRadar)
- Automate SOC workflows and incident response processes (Python/PowerShell)
- Improve alert quality, reducing false positives and enhancing detection coverage
- Support and lead incident investigations and escalations
- Integrate threat intelligence into monitoring and detection
- Maintain SOC playbooks and support continuous improvement of tooling and processes
Skills & Experience
- Experience in SOC Engineering or advanced SOC Analyst roles
- Strong hands-on experience with SIEM platforms and detection tuning
- Scripting/automation skills (Python, PowerShell or similar)
- Understanding of threat detection and incident response frameworks (e.g., MITRE ATT&CK)
Certifications
Certifications (CISSP, CISM, CEH, etc.) are a plus
Requirements
- Active DV Clearance (essential)
- Hybrid: 3 days per week in Bristol
#J-18808-Ljbffr