Cyber Security Engineer - SOC Tooling & Upgrades (SC/DV)

Tatton Recruitment; Stevenage; On-site; GBP 170,000 - 185,000; Full time

Job summary

World Class Defence Organisation is seeking a Cyber Security Engineer to join the SOC within the Digital Excellence UK team in Stevenage. You will lead on tool efficiency, alert tuning, and log ingestion, advising on new tools and expanding capabilities.

Reporting to the Cyber Security Capability Manager, you will ensure tool availability, readiness and resilience across in-scope networks, with strong emphasis on playbook scripting and incident support.

Qualifications

• Strong coding and scripting background in PowerShell and Python.
• Experience with APIs, HTTP/S, and JSON objects.
• Proven proxies administration and changes experience.
• Knowledge of Windows SMB and Unix NFS storage.
• Experience configuring IIS/AD/LDAP authentication.
• Experience with certificates, updates and EOL refresh.
• VMware/Hyper-V virtualization experience.
• Experience with cyber security tooling setup and maintenance.
• Experience with SIEM technologies.

Responsibilities

• Lead on back-end refresh and playbook scripting for cyber tools.
• Ensure availability and resilience of cyber security toolsets.
• Manage tool integrations, data feeds and topology mappings.
• Coordinate tool upgrades and lifecycle management.
• Provide investigation support using security platforms and custom searches.
• Collaborate with SOC to maintain alerting and reporting.
• Lead SME activities on SOC connectivity across networks.

Skills

PowerShell

Python

Regex

APIs

JSON objects

Proxies administration

Windows SMB

Nix NFS

AD/LDAP authentication

PKI/certificates

VMware/Hyper-V

Cyber security tooling

SIEM

AI/machine learning for workflows

Job description

World Class Defence Organisation is seeking a Cyber Security Engineer to join the SOC within the Digital Excellence UK team in Stevenage. You will lead on tool efficiency, alert tuning, and log ingestion, advising on new tools and expanding capabilities.

Reporting to the Cyber Security Capability Manager, you will ensure tool availability, readiness and resilience across in-scope networks, with strong emphasis on playbook scripting and incident support.