Security Engineer in England

Responsibilities

• Deploy, configure, and maintain SIEM platforms such as Splunk, QRadar, Sentinel, and Chronicle to enable robust threat detection.
• Normalize and onboard diverse log sources from cloud and on-premises environments for seamless monitoring.
• Develop and continually refine SIEM rules and queries for use cases involving advanced threat behaviors and anomaly detection.
• Design and implement incident response playbooks for threats such as phishing, lateral movement, malware infections, and more.
• Integrate response automation into SOAR platforms (e. g., XSOAR, Azure Logic Apps) to reduce response times and manual overhead.
• Use feedback from simulated incidents and threat intelligence to refine existing playbooks and workflows.
• Monitor security alerts for potential threats, investigate incidents, and coordinate cross‑team response activities.
• Collaborate with threat intelligence teams to enhance detection logic and fine‑tune resolution processes.
• Perform root‑cause analysis of recurring incidents and help define corrective actions to reduce future risks.
• Perform threat modeling using industry frameworks such as MITRE ATT&CK, STRIDE, or the Cyber Kill Chain.
• Design actionable SIEM use cases, detection rules, and workflows aligned with risk prioritization.
• Evaluate use‑case effectiveness through continual testing and KPIs, prioritizing iteration based on business relevance.
• Develop dashboards and metrics‑driven reports to showcase security posture and incident trends for leadership.
• Maintain detailed documentation of incident procedures, runbooks, playbooks, and analysis reports for audit or team use.
• Support monthly managerial reporting packs to present SOC effectiveness metrics.
• Provide mentorship to junior SOC analysts, transferring technical expertise on threat detection and response best practices.
• Assist pre‑sales teams by demonstrating SOC tools to prospective clients and refining operational delivery proposals.
• Scope, deploy, and operationalize new SOC solutions, benchmarking against industry and client expectations.
• Technical Skills
• Hands‑on experience with SIEM platforms such as Splunk, QRadar, Sentinel, Microsoft Defender, or Chronicle.
• Expertise with SIEM query languages (e. g., KQL, SPL, AQL) and strong knowledge of log normalization and parsing.
• Proficiency in scripting (e. g., Python, Power Shell) to automate tasks and build SOC efficiencies.
• Deep familiarity with cyber threat detection techniques related to frameworks like MITRE ATT&CK and vulnerability management.
• Experience managing ITIL processes, including Incident, Problem, and Change Management.

Certifications

• CISSP, GIAC, SC‑200, Splunk Power User/Admin, QRadar Specialist, or Chronicle Security Engineer certifications preferred.
• Candidates must be eligible to obtain UK SC clearance.
• Professional Skills
• Strong analytical and communication skills to present complex information to technical and non‑technical stakeholders.
• Experience in collaborative team dynamics and independent problem‑solving.
• Proven ability to transfer knowledge and mentor junior SOC team members effectively.
• EEO and Disability Commitment

We are an equal opportunities employer.

We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices.

We are also a proud Disability Confident Committed Employer – we are committed to creating a diverse and inclusive workforce.

We actively collaborate with individuals who have disabilities and long‑term health conditions which affect their ability to perform normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities.

In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role.

If you require any reasonable adjustments during the recruitment process, please let us know.

Benefits

• Range of tailored benefits supporting physical, emotional, and financial wellbeing.
• Learning and development opportunities with continuous growth and development for our people.
• Flexible work options.
• #J-18808-Ljbffr