At a Glance
- Tasks: Engineer and optimise Microsoft Sentinel and Defender XDR in a dynamic Cyber Security team.
- Company: Join a leading organisation in a highly regulated environment focused on Cyber Security.
- Benefits: Enjoy 30 days annual leave, hybrid working, and a training budget for certifications.
- Other info: Clear progression pathway from Junior to Lead roles in a supportive team.
- Why this job: Shape SOC engineering strategy and work with cutting-edge Microsoft security technology.
- Qualifications: Experience with Microsoft Sentinel, KQL, and strong scripting skills required.
The predicted salary is between 58500 - 71500 £ per year.
We are recruiting for an exciting opportunity within a highly regulated environment. We're looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities. This isn't a pure triage/analyst role; we need engineers who can build, tune, automate, and scale our detection platform.
What you'll be doing:
- Engineering and maintaining Microsoft Sentinel, Defender XDR, and Log Analytics platforms
- Onboarding and normalising log sources across hybrid/cloud environments
- Writing and tuning KQL detection rules and analytics logic
- Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort
- Managing telemetry ingestion, parsers, and data retention for cost optimisation
- Producing platform health reports and identifying coverage gaps
- Mentoring junior engineers and contributing to team development
- Acting as technical SME during incidents
What we're looking for:
- Deep experience with Microsoft Sentinel, Defender suite, and KQL
- Strong scripting/automation skills (PowerShell, Python, Logic Apps)
- Solid understanding of MITRE ATT&CK, NCSC CAF, NIST CSF
- Stakeholder management - able to translate technical complexity to non-technical audiences
- Degree in Computer Science, Cyber Security, or equivalent
Desirable:
- SC-200 / AZ-500, ServiceNow SecOps, regulated sector experience (nuclear/defence/CNI)
What's in it for you:
- 30 days annual leave (+ bank holidays)
- Hybrid working - flexible on-site
- Opportunity to shape SOC engineering strategy in a critical environment
- Clear progression pathway (Junior ? Senior ? Lead)
- Certifications and training budget (SC-200, AZ-500, etc.)
- Work with cutting-edge Microsoft security tech
SOC Engineer in Norfolk employer: IBEX RECRUITMENT LTD
Join a leading global consulting firm renowned for its exceptional cyber practices, where you will be part of a dynamic team dedicated to tackling high-stakes cyber incidents. With a strong emphasis on employee development and a collaborative work culture, this role offers unique opportunities for growth, mentorship, and impactful contributions to client success. Located in the UK, you'll benefit from working alongside over 200 specialists in a supportive environment that values innovation and excellence.
