Security Operations Engineer (SOC Engineer L2) in Royal Leamington Spa

Work Location: Warrington or Leamington Spa

Role Type: Permanent

Mode of Working: Hybrid

Are You Ready to Utilise Your Experience in Cyber Security? We have an exciting role for you — Security Operations Engineer (SOC Engineer L2).

The Role:

As an experienced Security Engineer, you will be responsible for supporting the design, implementation, and continuous improvement of security monitoring, detection, response, and automation capabilities across enterprise environments. You will work closely with SOC, infrastructure, cloud, and application teams to enhance visibility, improve detection coverage, and streamline security operations through automation and modern security technologies.

Key responsibilities:

• Evaluate and onboard security log sources from cloud, infrastructure, applications, and security tools.
• Configure and maintain log collection, parsing, normalization, enrichment, and data quality processes within SIEM platforms.
• Develop and maintain detection rules, correlation searches, alerts, and security monitoring use cases.
• Support tuning and optimization of detections to improve alert quality and reduce false positives.
• Assist with the development and maintenance of SOAR playbooks, workflows, and security automation initiatives.
• Implement integrations between SIEM, SOAR, EDR/XDR, IAM, vulnerability management, ticketing systems, and other security platforms.
• Manage and maintain security tooling infrastructure, ensuring reliable operation and performance.
• Monitor and troubleshoot log ingestion pipelines, integrations, and security platform issues.
• Produce operational reports, dashboards, and metrics to support security monitoring and SOC performance measurement.
• Support incident response activities, investigations, threat hunting, and continuous improvement initiatives.
• Contribute to AI-driven security initiatives that enhance alert triage, investigation efficiency, threat detection, and response processes.
• Identify opportunities to automate repetitive security tasks and reduce manual effort within the SOC.

Your Profile:

Essential skills/knowledge/experience:

• Critical thinking skills and problem solving.
• Communication skills (able to convey complex ideas in simple terms to both non-native English speakers and management).
• Experienced with AI agents (both personal use and implementation of agentic workflows in security tools).
• SIEM Administration.
• Parsing & Normalization of log and data sources.
• Detection Engineering Rule Development & Tuning.
• SOAR and Security Automation.
• API Integrations and logic app development.
• Security Tool Administration.
• Understanding of metrics reporting and method of creating automated reports.
• Bachelor’s degree in cyber security, Computer Science, Information Technology, or related field.
• 5+ years of Detection Engineering, or Security Engineering experience.
• Experience designing and implementing enterprise-scale SIEM and EDR solutions.
• Microsoft SC-200, Microsoft SC-100, AZ-500, CEH, Python scripting.

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network. We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.

Diversity, Inclusion and Wellbeing:

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998. We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role. As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role.

If you are an applicant who needs any adjustments to the application process or interview, please contact us.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.