Cyber Security Engineer

Carbon 60; Stevenage; On-site; GBP 109,000 - 142,000; Full time

Job summary

Carbon 60 is seeking a Cyber Security Engineer to join a defence-focused SOC. This 24-month contract offers up to £680 per day inside IR35, based in Stevenage with an onsite requirement of four days per week.

You will support and improve SOC tooling, manage SIEM platforms, develop automation, and work with analysts to enhance detection and response capabilities in a complex security environment.

Qualifications

• Experience with SIEM technologies (Sentinel, Splunk, QRadar).
• Experience in SIEM and SOC environments.
• Knowledge of threat detection, hunting or incident response.
• Scripting and automation using Python or PowerShell.
• Experience with security tooling, integrations and log management.
• Knowledge of Defender/XDR is a plus.

Responsibilities

• Supporting and improving SOC security tooling and capabilities.
• Managing and optimising SIEM and threat detection platforms.
• Developing and enhancing automation and security playbooks.
• Supporting tool integrations, data onboarding and log ingestion.
• Investigating security events and improving detection coverage.
• Assisting with platform upgrades, maintenance and lifecycle activities.
• Working closely with analysts, engineers and security stakeholders to deliver new capabilities.

Skills

SIEM management

SOC operations

Threat detection

Automation

Python

PowerShell

Defender/XDR

Log ingestion

Tools

Microsoft Sentinel

Splunk

QRadar

Microsoft Defender

XDR

Job description

Cyber Security Engineer

Key Information

Contract: 24 Months

Rate: Up to £680 per day (Inside IR35)

Location: Stevenage

Onsite Requirement: 4 days per week

We're supporting a leading defence organisation on the search for a Cyber Security Engineer to join a growing Cyber Security Operations function.

This is a fantastic opportunity to work on large-scale security tooling, detection capabilities and SOC technologies within a complex, highly secure environment. You'll play a key role in enhancing security visibility, improving detection capabilities and supporting the ongoing evolution of cyber defence tooling.

What You'll Be Doing

• Supporting and improving SOC security tooling and capabilities
• Managing and optimising SIEM and threat detection platforms
• Developing and enhancing automation and security playbooks
• Supporting tool integrations, data onboarding and log ingestion
• Investigating security events and improving detection coverage
• Assisting with platform upgrades, maintenance and lifecycle activities
• Working closely with analysts, engineers and security stakeholders to deliver new capabilities

What We're Looking For

We're keen to speak with Cyber Security Engineers, SOC Engineers and Security Engineers who have experience with some of the following:

• SIEM technologies such as Microsoft Sentinel, Splunk or QRadar
• Security Operations Centre (SOC) environments
• Threat detection, threat hunting or incident response
• Scripting and automation using Python, PowerShell or similar
• Security tooling, integrations and log management
• Microsoft Defender, XDR or other endpoint security platforms