Cyber Defence Engineer: SIEM & SOC Data Expert

Plannedlink; West Midlands; On-site; GBP 60,000 - 90,000; Full time

Job summary

Plannedlink in the West Midlands, United Kingdom is seeking a Cyber Defence Engineer to join a growing security team responsible for testing, deployment, maintenance, configuration and troubleshooting of the SOC’s technology stack (hardware and software). The engineer will also assist with data pipelines and the development of system signatures and the professional growth of the team.

The role requires deep knowledge of cyber security, data analytics, and SIEM platforms, with a focus on

Qualifications

• Minimum 5 years of relevant security engineering experience.
• Experience with enterprise ICS/network architectures.
• Experience with data-intensive distributed applications.
• Experience maintaining SIEM platforms such as Elastic.
• Strong analytical and problem-solving skills.
• Ability to lead junior SOC engineers.
• Knowledge of cyber defence policies and regulations.

Responsibilities

• Perform system administration for cyber defence applications.
• Manage system/server resources and performance.
• Diagnose and resolve incidents affecting operability.
• Coordinate with Cyber Defence and CTI Analysts on data flows and signatures.
• Manage data from enterprise networks and sources.
• Develop data management standards and policies.
• Analyze data to provide actionable recommendations.
• Update SOC leads on investigations.
• Document SOC processes for training.

Skills

Networking basics

Big data technologies

SIEM platforms

Elastic

IDS/IPS

Packet capture

Signatures development

Mentoring

Cybersecurity policies

Tools

VMware

Hyper-V

Job description

Plannedlink in the West Midlands, United Kingdom is seeking a Cyber Defence Engineer to join a growing security team responsible for testing, deployment, maintenance, configuration and troubleshooting of the SOC’s technology stack (hardware and software). The engineer will also assist with data pipelines and the development of system signatures and the professional growth of the team.

The role requires deep knowledge of cyber security, data analytics, and SIEM platforms, with a focus on