Cyber Security Engineer

Guidant Global; Stevenage; On-site; GBP 77,000 - 129,000; Full time

Job summary

Guidant Global is seeking a Cyber Security Engineer to join a defence-focused security operations function in Stevenage. The role focuses on large-scale tooling, detection capabilities and secure tooling within a highly controlled environment.

You will enhance security visibility, improve detection capabilities and support the evolution of cyber defence tooling while working onsite 4/5 days a week with active DV clearance.

Qualifications

• Experience with SOC environments and security tooling.
• Familiarity with SIEM platforms and threat detection.
• Automation scripting using Python/PowerShell preferred.

Responsibilities

• Support and improve SOC security tooling and capabilities.
• Manage and optimize SIEM and threat detection platforms.
• Develop and enhance automation and security playbooks.
• Support tool integrations, data onboarding and log ingestion.
• Investigate security events and improve detection coverage.
• Assist with platform upgrades, maintenance and lifecycle activities.
• Collaborate with analysts and engineers to deliver new capabilities.

Skills

SIEM

SOC Operations

Threat detection

Threat hunting

Incident response

Python

PowerShell

Log management

Microsoft Defender

XDR

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

Cyber Security Engineer

Key Information

• Contract: 24 Months


• Rate: Up to £700 per day (Inside IR35)


• Location: Stevenage


• Onsite Requirement: 4/5 days per week


• Security Clearance : Active DV Clearance required

We're supporting a leading defence organisation on the search for a Cyber Security Engineer to join a growing Cyber Security Operations function.

This is a fantastic opportunity to work on large-scale security tooling, detection capabilities and SOC technologies within a complex, highly secure environment. You'll play a key role in enhancing security visibility, improving detection capabilities and supporting the ongoing evolution of cyber defence tooling.

What You'll Be Doing

• Supporting and improving SOC security tooling and capabilities


• Managing and optimising SIEM and threat detection platforms


• Developing and enhancing automation and security playbooks


• Supporting tool integrations, data onboarding and log ingestion


• Investigating security events and improving detection coverage


• Assisting with platform upgrades, maintenance and lifecycle activities


• Working closely with analysts, engineers and security stakeholders to deliver new capabilities

What We're Looking For

We're keen to speak with Cyber Security Engineers, SOC Engineers and Security Engineers who have experience with some of the following:

• SIEM technologies such as Microsoft Sentinel, Splunk or QRadar


• Security Operations Centre (SOC) environments


• Threat detection, threat hunting or incident response


• Scripting and automation using Python, PowerShell or similar


• Security tooling, integrations and log management


• Microsoft Defender, XDR or other endpoint security platforms

You don't need experience across everything listed above. If you have a strong security engineering background and are looking for your next contract opportunity, we'd encourage you to apply.

Please note - Active DV Clearance is required to apply for the role.