Cyber Security Engineer - SOC Tooling Lead (Hybrid)

Certain Advantage; Stevenage; Hybrid; GBP 170,000 - 184,000; Full time

Job summary

World Class Defence Organisation in Stevenage is seeking a Cyber Security Engineer contractor for a 24-month period. The role involves leading on cybersecurity tooling efficiency, alert tuning, log ingest to SIEM and other platforms, and advising on new tool implementations.

You'll work to ensure availability and resilience of cyber toolsets within in-scope environments, with SC clearance possible and DV clearance later. Hybrid/onsite 5 days a week in Stevenage.

Qualifications

• Strong coding and scripting background with PowerShell, Python and Regex.
• Experience with APIs, HTTP/S headers and JSON objects.
• Experience with proxies administration.
• Windows SMB and Linux NFS storage familiarity.
• IIS configuration and Active Directory/ LDAP authentication.
• Experience applying certificates and software updates; EOL refresh.
• VMware/Hyper-V virtualization and virtual switches experience.
• Experience building and maintaining cyber security tooling.
• Experience with AI or machine learning tech to optimise workflows or playbooks.
• Experience with SIEM technologies.

Responsibilities

• Lead on technical aspects to ensure cyber tool efficiency for alert tuning and log ingest.
• Advise on new tool implementations and expand existing capabilities.
• Maintain availability, readiness and resilience of security toolsets.
• Support investigation activity using diverse security platforms and queries.
• Collaborate with SOC team on tool upgrades, playbook scripting and fault finding.
• Document integrations, data sources and SOC connectivity across networks.

Skills

PowerShell

Python

Regex

APIs

HTTP headers

JSON

Proxies administration

Windows

Linux

Active Directory/ LDAP

VMware/ Hyper-V

SIEM

AI / ML for workflows

Tools

APIs

JSON

SIEM tools

Job description

World Class Defence Organisation in Stevenage is seeking a Cyber Security Engineer contractor for a 24-month period. The role involves leading on cybersecurity tooling efficiency, alert tuning, log ingest to SIEM and other platforms, and advising on new tool implementations.

You'll work to ensure availability and resilience of cyber toolsets within in-scope environments, with SC clearance possible and DV clearance later. Hybrid/onsite 5 days a week in Stevenage.