Senior SOC Engineer

Senior SOC Engineer Remote £65,000 - £75,000 + 20% Bonus

We are working exclusively with a leading technology and digital transformation business that is going through a rapid period of growth within its Cyber Services function. As part of this expansion, they are looking for a Senior SOC Engineer to join their Security Operations team and play a key role in the continued development of a modern, highly technical SOC.

This is an excellent opportunity for an experienced SOC Engineer who wants to remain hands-on while taking greater ownership of SOC architecture, automation and engineering. You'll work across a broad customer base and have the opportunity to help shape how the SOC evolves as the wider cyber business continues to grow.

The Role

As Senior SOC Engineer, you'll take a leading role in the design, deployment and ongoing improvement of the technologies underpinning the SOC, including SIEM, XDR, SOAR, scripting and automation.

You'll work across everything from custom log parsing and automated response workflows through to SIEM/XDR architecture, customer onboarding and the development of new detection and response capabilities.

You'll also act as a senior technical escalation point within the team, supporting other engineers and analysts while working closely with SOC leadership on the ongoing engineering maturity roadmap.

The environment offers access to dedicated SOC infrastructure and lab environments covering areas including malware analysis, detection testing, threat intelligence development and proof of concepts.

Key Responsibilities

• Design, develop and maintain automation across core SOC workflows to improve response times, efficiency and consistency.
• Architect, implement and enhance SIEM and XDR environments across internal and customer-facing deployments.
• Develop custom SOAR automation, integrations, playbooks and response workflows.
• Create and manage log parsing and data normalisation across multiple internal and external data sources.
• Deploy, manage and continually improve SOC technologies including SIEM, XDR, SOAR and vulnerability management platforms.
• Lead technical elements of new customer onboarding and security technology deployments.
• Act as a senior escalation point for complex engineering incidents across internal and managed customer environments.
• Mentor SOC Engineers and Analysts, supporting their technical development.
• Identify opportunities to automate and improve detection, response and wider SOC processes.
• Use lessons from incidents, threat intelligence and emerging attack techniques to continually improve SOC engineering capabilities.
• Work closely with senior Security Operations leadership on the continued development of the SOC's engineering maturity.