Cyber Operations Security Engineer — SIEM & Sentinel (Hybrid)

Softcat plc; Manchester; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Pension

Share incentive plan

Life Assurance

Holiday

Trips

Vouchers

Partner/family Benefits

Maternity, Paternity and Adoption

Job summary

Softcat plc is seeking a Security Engineer to join our Cyber Operations team in the UK. You’ll design and deliver SIEM/Sentinel engineering, onboard customers, configure data connectors, and build dashboards to enhance threat detection and response.

The role offers hybrid working (2 days in the office, 3 days from home) and opportunities to work with leading security tools while collaborating with engineering and security teams.

Responsibilities

• Work with customers and internal stakeholders to identify development and improvement opportunities and continually evaluate our cyber practices and capabilities, to increase effectiveness and timeliness of the service
• Work as a member of Engineering, utilizing various security tools, automation, best practice and efficiency across the platforms in use and surrounding technical practices
• Deliver end‑to‑end SIEM/Sentinel engineering by onboarding customers, configuring data connectors, integrations, KQL, automation, dashboards and reporting
• Implement tuning, enrichment and optimisation across Sentinel and align with other SIEM tools.
• Maintain SIEM ingestion pipeline reliability by investigating and resolving issues across connectors, parsing, content, automation and transformation logic, while proactively monitoring latency, throughput and data fidelity to prevent data loss

Job description

Softcat plc is seeking a Security Engineer to join our Cyber Operations team in the UK. You’ll design and deliver SIEM/Sentinel engineering, onboard customers, configure data connectors, and build dashboards to enhance threat detection and response.

The role offers hybrid working (2 days in the office, 3 days from home) and opportunities to work with leading security tools while collaborating with engineering and security teams.