Hands-on SOC & Threat Detection Specialist

Tank Recruitment; England; On-site; GBP 55,000 - 75,000; Full time

Job summary

Tank Recruitment is seeking an experienced Cyber Security Operations Specialist to join a growing security team protecting a complex IT, cloud and OT environment. You will detect, investigate and respond to threats, improve monitoring, and contribute to incident response capabilities across IT, cloud and on-premise estates, working with internal teams and external providers.

This hands-on role requires strong SIEM/EDR skills, knowledge of MITRE ATT&CK, and familiarity with ISO 27001 / GDPR

Qualifications

• Experience in security operations, SOC or incident response.
• Hands-on experience with SIEM and EDR platforms.
• Experience investigating incidents across cloud and on-premise environments.
• Strong knowledge of Windows and Linux/Unix.
• Familiarity with MITRE ATT&CK framework and threat intelligence.
• Familiarity with ISO 27001, NIS and GDPR would be beneficial.

Responsibilities

• Monitor, triage and investigate security alerts and incidents across IT, cloud and OT environments.
• Lead or support incident response, including containment, eradication, recovery and escalation.
• Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities.
• Reduce false positives and improve detection coverage using threat intelligence and incident learnings.
• Investigate threats using frameworks such as MITRE ATT&CK.
• Work closely with internal IT, engineering and security teams, alongside external security providers.
• Maintain and improve security playbooks, procedures, documentation and response processes.
• Support security reporting, compliance and audit activity.
• Provide technical guidance and support to junior members of the security team.

Skills

Security Operations / SOC / Incident R

SIEM & EDR platforms

Cloud & on-premise

Windows / Linux

MITRE ATT&CK

ISO 27001 / NIS / GDPR

Tools

Microsoft security technologies

Job description

Tank Recruitment is seeking an experienced Cyber Security Operations Specialist to join a growing security team protecting a complex IT, cloud and OT environment. You will detect, investigate and respond to threats, improve monitoring, and contribute to incident response capabilities across IT, cloud and on-premise estates, working with internal teams and external providers.

This hands-on role requires strong SIEM/EDR skills, knowledge of MITRE ATT&CK, and familiarity with ISO 27001 / GDPR