Cyber Security Engineer (SoC)

TN United Kingdom; Ross-on-Wye; On-site; GBP 40,000 - 80,000; Full time

Job description

Job Description:

Methods Business and Digital Technology Limited

Methods is a £100M+ IT Services Consultancy partnering with central government departments and agencies to transform public sector operations in the UK. Established over 30 years ago and UK-based, we focus on transformation, delivery, and collaboration to create end-to-end business and technical solutions that are people-centred, safe, and future-oriented.

Our human-centric approach distinguishes us from other consultancies, system integrators, and software houses. We prioritize people, technology, and data, aiming to create value and sustainability for our clients, staff, communities, and the planet.

We support our clients' projects collaboratively, sharing skills and solving problems. At Methods, we value fun, hard work, learning from mistakes, and continuous improvement. While primarily focused on the public sector, we are expanding into the private sector.

Methods was acquired by the Alten Group in early 2022.

Requirements:

• SIEM Management: Use your expertise in Security Information and Event Management (SIEM) systems, especially Elastic, to configure, monitor, and manage security alerts and incidents. Utilize Elastic's capabilities for security data analysis and threat detection.
• Elastic Stack Proficiency: Demonstrate hands-on experience with the Elastic Stack (Elasticsearch, Logstash, Kibana) for security data analysis and threat intelligence.
• KQL Query Development: Create advanced Kusto Query Language (KQL) queries to identify security threats in Azure environments, enhancing threat intelligence and security posture.
• Networking Security: Implement and maintain network security controls to protect against unauthorized access, data breaches, and anomalies, collaborating with network teams.
• Syslog Management: Configure and analyze syslog servers for security incident investigation and threat detection.
• Azure Security Expertise: Work with Azure security tools and services, including IAM, NSG, and Azure Firewall, to improve cloud security policies and practices.

Qualifications:

• Deep knowledge of Azure & Sentinel
• Experience as a Cyber Analyst focusing on Security Operations
• Expertise with Elastic Stack (Elasticsearch, Logstash, Kibana)
• Familiarity with other SIEM tools and security technologies
• Knowledge of cybersecurity best practices, threat intelligence, and incident response
• Strong analytical and problem-solving skills
• Relevant certifications (e.g., CISSP, CEH, ECE) are a plus

This role requires or is willing to undergo Security Clearance. Candidates will complete a Baseline Personnel Security Standard check during onboarding. Details are available on the government website. If you cannot meet these criteria, employment may be delayed or rejected. These details will be discussed during the interview.

At Methods, we are passionate about our people. We encourage development and enjoyment in your work.

Benefits:

• Autonomy to develop your skills and experience
• Participation in impactful projects
• Inspiring leadership and collaborative environment

Additional benefits include access to LinkedIn Learning, management development programs, wellness support, flexible working options, social events, generous leave, volunteering days, pension scheme, discretionary bonus, life assurance, private medical and travel insurance, enhanced parental pay, travel schemes, and more. For a full list, please visit our website.