Cyber SOC Engineer: SIEM & Detection Automation

John Lewis; Stevenage; Presencial; GBP 160.000 - 192.000; Jornada completa

Descripción de la vacante

John Lewis is seeking a Cyber Security Engineer to join the SOC-focused security operations team in Stevenage. The role emphasizes building and refining security tooling, detection capabilities and playbooks within a highly secure environment.

You will work on large-scale tooling, integration efforts and ongoing security improvements to enhance threat detection and incident response capabilities, collaborating with analysts and engineers to deliver new security features.

Formación

• Experience with SIEM tools (Microsoft Sentinel, Splunk or QRadar).
• Experience in SOC environments.
• Experience in threat detection or incident response.
• Scripting and automation with Python or PowerShell.
• Security tooling and log management.

Responsabilidades

• Support and improve SOC security tooling and capabilities.
• Manage and optimise SIEM and threat detection platforms.
• Develop and enhance automation and security playbooks.
• Support tool integrations, data onboarding and log ingestion.
• Investigate security events and improve detection coverage.
• Assist with platform upgrades, maintenance and lifecycle activities.
• Collaborate with analysts, engineers and security stakeholders to deliver new capabilities.

Conocimientos

SIEM

Threat detection

Automation

Python/PowerShell

Herramientas

Microsoft Sentinel

Splunk

QRadar

Descripción del empleo

John Lewis is seeking a Cyber Security Engineer to join the SOC-focused security operations team in Stevenage. The role emphasizes building and refining security tooling, detection capabilities and playbooks within a highly secure environment.

You will work on large-scale tooling, integration efforts and ongoing security improvements to enhance threat detection and incident response capabilities, collaborating with analysts and engineers to deliver new security features.