Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Enhance security operations and develop incident response playbooks in a dynamic environment.
- Company: Join NTT DATA, a global leader in IT and cybersecurity solutions, making a real-world impact.
- Benefits: Enjoy flexible work options, continuous learning opportunities, and a supportive, inclusive culture.
- Why this job: Be part of a team that values innovation, collaboration, and personal growth while tackling exciting challenges.
- Qualifications: 3-5 years in IT security, SIEM expertise, and relevant certifications are essential.
- Other info: SC Clearance required; opportunity for mentorship and involvement in cutting-edge projects.
The predicted salary is between 36000 - 60000 £ per year.
Join to apply for the SOC Solutions Engineer role at NTT DATA
Join to apply for the SOC Solutions Engineer role at NTT DATA
Get AI-powered advice on this job and more exclusive features.
Direct message the job poster from NTT DATA
We are currently recruiting for a SOC Solutions Engineer to join our growing Security Operations Centre business.
This is a hybrid variable position that can be based in our Birmingham or London offices
About Us:
NTT Data is a leading Managed Service Provider (MSP) with a global reach empowering local team, undertaking hugely exciting work and is genuinely changing the world.
We specialise in delivering cutting-edge IT and cybersecurity solutions to our diverse client base. We provide expert-managed services to help clients protect their data, comply with regulations, and manage evolving cyber threats. We are looking for a skilled Information Security Manager to join our team and be billed out to a key client to enhance their information security posture.
What you will be doing;
- The primary function of the Senior SOC Engineer is to enhance our security operations capabilities. This role requires deep expertise in SIEM platforms including Splunk, IBM QRadar, Microsoft Defender, Microsoft Sentinel, and Google Chronicle, with a strong focus on playbook development, analytical rule creation, and threat modelling. You will be instrumental in building and optimizing our detection and response strategies.
- Deploy, configure, and maintain SIEM platforms (Splunk, QRadar, Sentinel, Defender, Chronicle).
- Onboard and normalize log sources across cloud and on-prem environments.
- Develop and optimize analytical rules for threat detection, anomaly detection, and behavioural analysis.
- Playbook Development & Automation
- Design and implement incident response playbooks for various threat scenarios (e.g., phishing, lateral movement, data exfiltration).
- Integrate playbooks with SOAR platforms (e.g., Microsoft Logic Apps, XSOAR) to automate triage and response.
- Continuously refine playbooks based on threat intelligence and incident feedback.
- Monitor and analyse security alerts and events to identify potential threats.
- Perform in-depth investigations and coordinate incident response activities.
- Collaborate with threat intelligence teams to enrich detection logic.
- Conduct threat modelling exercises using frameworks like MITRE ATT&CK, STRIDE, or Kill Chain.
- Translate threat models into actionable detection use cases and SIEM rules.
- Prioritize detection engineering efforts based on risk and business impact.
- Generate reports and dashboards for stakeholders on security posture and incident trends.
- Work closely with IT, DevOps, and compliance teams to ensure secure system configurations.
- Provide mentorship and guidance to junior analysts and engineers.
- Maintain accurate and up-to-date documentation of security procedures, incident response plans, and analysis reports.
- Support the creation of monthly reporting packs as per contractual requirements.
- Create and document robust event and incident management processes, Runbooks & Playbooks
- Other responsibilities:
- Involvement in scoping and standing up new solutions for new opportunities
- Assisting Pre-Sales team with requirements on new opportunities
- Demonstrations of SOC tools to clients
- Continual Service Improvement – Recommendations for change to address incidents or persistent events.
What you will bring;
- Must be able to obtain SC Clearance or already hold SC clearance.
- SIEM Expertise: Hands-on experience with at least two of the following:
- Splunk
- IBM QRadar
- Microsoft Sentinel
- Google Chronicle
- Technical Skills:
- Strong knowledge of log formats, parsing, and normalization.
- Experience with KQL, SPL, AQL, or other SIEM query languages.
- Familiarity with scripting (Python, PowerShell) for automation and enrichment.
- Security Knowledge:
- Deep understanding of threat detection, incident response, and cyber kill chain.
- Familiarity with MITRE ATT&CK, NIST, and CIS frameworks.
- Strong interpersonal and presentation skills.
- Strong analytical skills
- Must have good understanding on network traffic flows and able to understand normal and suspicious activities.
- Must have good understanding of Vulnerability Scanning and management as well as Ethical Hacking (Penetration Testing)
- Knowledge of ITIL disciplines such as Incident, Problem and Change Management.
- Ability to work with minimal levels of supervision.
- Willingness to work in a job that involves 24/7 on call.
Education Requirements & Experience
- Minimum of 3 to 5 years of experience in the IT security industry, preferably working in a SOC/NOC environment.
- Preferably holds Cyber Security Certification e.g. ISC2 CISSP, GIAC, SC-200, Splunk Certified Admin/Power User, IBM QRadar Certified Specialist, Google Chronicle Security Engineer etc
- Experience with Service Now Security suite
- Experience with Cloud platforms (AWS and/or Microsoft Azure)
- Excellent knowledge of Microsoft Office products, especially Excel and Word
Reports to
- Security Director – NTT DATA UK Security Practice
- Client Delivery Director – NTT DATA UK Managed Services
- We’re a business with a global reach that empowers local teams, and we undertake hugely exciting work that is genuinely changing the world. Our advanced portfolio of consulting, applications, business process, cloud, and infrastructure services will allow you to achieve great things by working with brilliant colleagues, and clients, on exciting projects.
- Our inclusive work environment prioritises mutual respect, accountability, and continuous learning for all our people. This approach fosters collaboration, well-being, growth, and agility, leading to a more diverse, innovative, and competitive organisation. We are also proud to share that we have a range of Inclusion Networks; Creating Inclusion Together at NTT DATA UK | NTT DATA
- We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.
- You can find more information about NTT DATA UK & Ireland here:
- We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer – we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.
Seniority level
-
Seniority level
Mid-Senior level
Employment type
-
Employment type
Full-time
Job function
-
Job function
Consulting
-
Industries
IT Services and IT Consulting
Referrals increase your chances of interviewing at NTT DATA by 2x
Get notified about new Solutions Engineer jobs in London Area, United Kingdom .
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 week ago
London, England, United Kingdom 1 week ago
London, England, United Kingdom 4 days ago
London, England, United Kingdom 5 days ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 6 days ago
London, England, United Kingdom 1 year ago
London, England, United Kingdom 3 days ago
London, England, United Kingdom 11 hours ago
London, England, United Kingdom 1 month ago
Graduate Software Engineer 2025 – Platform
London, England, United Kingdom 1 week ago
London, England, United Kingdom 2 months ago
London, England, United Kingdom 2 days ago
London, England, United Kingdom 3 days ago
London, England, United Kingdom 6 months ago
London, England, United Kingdom 8 months ago
London, England, United Kingdom $140,000.00-$180,000.00 1 month ago
London, England, United Kingdom 3 days ago
London, England, United Kingdom 2 months ago
Graduate Software Engineer 2025 – RegTech
London, England, United Kingdom 1 month ago
London, England, United Kingdom 3 days ago
London, England, United Kingdom 4 days ago
London, England, United Kingdom 1 week ago
London, England, United Kingdom 3 weeks ago
Greater London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 week ago
Software Engineer-Full stack (All Levels)
London, England, United Kingdom 3 weeks ago
London, England, United Kingdom 1 month ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr
SOC Solutions Engineer employer: NTT DATA
Contact Detail:
NTT DATA Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land SOC Solutions Engineer
✨Tip Number 1
Familiarise yourself with the specific SIEM platforms mentioned in the job description, such as Splunk and IBM QRadar. Consider setting up a home lab or using trial versions to gain hands-on experience, which will help you stand out during interviews.
✨Tip Number 2
Engage with online communities and forums related to cybersecurity and SOC operations. Networking with professionals in the field can provide valuable insights and potentially lead to referrals for the position at NTT DATA.
✨Tip Number 3
Stay updated on the latest trends and threats in cybersecurity by following relevant blogs, podcasts, and news outlets. Being knowledgeable about current events will demonstrate your passion and commitment to the field during discussions with interviewers.
✨Tip Number 4
Prepare to discuss your experience with incident response and threat modelling frameworks like MITRE ATT&CK. Be ready to share specific examples of how you've applied these concepts in previous roles, as this will showcase your expertise and problem-solving skills.
We think you need these skills to ace SOC Solutions Engineer
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in cybersecurity and SOC environments. Emphasise your hands-on experience with SIEM platforms like Splunk, IBM QRadar, and Microsoft Sentinel, as well as any certifications you hold.
Craft a Compelling Cover Letter: In your cover letter, express your passion for cybersecurity and detail how your skills align with the responsibilities of the SOC Solutions Engineer role. Mention specific projects or experiences that demonstrate your expertise in threat detection and incident response.
Showcase Technical Skills: Clearly outline your technical skills related to log formats, parsing, and scripting languages such as Python or PowerShell. Provide examples of how you've used these skills in previous roles to enhance security operations.
Highlight Soft Skills: Don't forget to mention your interpersonal and presentation skills, as well as your ability to work collaboratively with teams. These are crucial for the role, especially when mentoring junior analysts and working with cross-functional teams.
How to prepare for a job interview at NTT DATA
✨Showcase Your SIEM Expertise
Make sure to highlight your hands-on experience with SIEM platforms like Splunk, IBM QRadar, or Microsoft Sentinel. Be prepared to discuss specific projects where you deployed, configured, or maintained these systems, as well as any analytical rules or playbooks you developed.
✨Demonstrate Threat Modelling Knowledge
Familiarise yourself with threat modelling frameworks such as MITRE ATT&CK or STRIDE. During the interview, be ready to explain how you've applied these frameworks in past roles to enhance detection and response strategies.
✨Prepare for Technical Questions
Expect technical questions related to log formats, parsing, and normalisation. Brush up on your knowledge of KQL, SPL, or AQL query languages, and be ready to demonstrate your understanding of network traffic flows and suspicious activities.
✨Emphasise Collaboration Skills
NTT DATA values teamwork, so be prepared to discuss how you've collaborated with IT, DevOps, and compliance teams in previous roles. Share examples of how you mentored junior analysts or contributed to a positive team environment.
