Senior SOC Engineer in Hampshire

Nomios' mission is to build a ‘secure and connected’ future. Organisations across Europe depend on us to help secure and connect their digital infrastructures. In support of our continued UK growth, we are seeking a Senior SOC Engineer to join our Security Operations team. This role presents a great opportunity to shape the direction of a modern, technology focused SOC that values engineering excellence, deep technical capability and a culture of innovation.

Your role as Senior SOC Engineer:

• Lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation.
• Drive meaningful enhancements to our detection and response capabilities by building custom log parsers and response workflows, and developing platform architecture.
• Play a central role in security orchestration and automation, helping reduce time to detect and respond by refining playbooks and building intelligent workflows.
• Lead customer onboarding in collaboration with SOC Operations, ensuring secure, efficient deployments aligned with our model.
• Work directly with SIEM/XDR platforms and custom tooling, with access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts.
• Be part of a high‑performing team that values hands‑on expertise, technical leadership, and continuous growth.
• Benefit from cyber ranges, training labs, and the freedom to shape your development path.
• Gain exposure to a wide range of industries, from government and defence to healthcare, telecoms, legal, and manufacturing, broadening your knowledge of real‑world security practices.

Key Responsibilities:

• Mentor and guide SOC engineers and analysts, supporting their technical development and helping them grow within a high-performance team.
• Design, develop and maintain automation across key SOC workflows, improving efficiency, response speed and consistency.
• Create and manage log parsing and data normalisation across a variety of internal and external sources, ensuring high quality telemetry across the estate.
• Architect and implement SIEM and XDR environments tailored to both internal use and customer-facing deployments.
• Deploy, manage and continually enhance core SOC technologies, including SIEM, XDR, SOAR, vulnerability management and custom automation scripts, all supported by our dedicated in-house infrastructure and lab environments.
• Act as a senior escalation point during complex engineering incidents across both internal systems and managed customer environments.
• Work with the wider engineering team to document, maintain and improve internal wikis and deployment guides, ensuring consistent and high quality engineering delivery across the team.
• Collaborate with the Head of Security Operations on the ongoing development and execution of the SOC’s engineering maturity roadmap.
• Continuously assess and deliver automation and process improvements, both internally and across customer environments, to enhance detection, response and operational efficiency.
• Apply lessons learned from incidents, threat intelligence and emerging attack techniques to refine and improve engineering output, ensuring the SOC remains agile, proactive and threat-driven.

Job Requirements:

• We hire result‑orientated, smart, and high‑energy individuals who bring a can‑do attitude and a willingness to go the extra mile and deliver exceptional outcomes.
• You should be organised and rigorous, with excellent analytical skills.
• Good communication with customers and internal stakeholders is vital, as is the ability to work as part of a dynamic team.
• Expert Knowledge of SOAR – including developing custom automation and integrations. Preferred vendors: Palo Alto Cortex XSOAR, Logic Apps, Siemplify, Jupyter Notebooks.
• Good Knowledge of Cloud Environments.