Hybrid Cyber Security Engineer | SOC & SIEM

Tatton Recruitment; Stevenage; On-site; GBP 105,000 - 149,000; Full time

Job summary

World Class Defence Organisation seeks a Cyber Security Engineer to join the SOC within Digital Excellence UK. You will lead technical tasks to tune alerts, improve log ingestion, and expand tool capabilities.

Reporting to the Cyber Security Capability Manager, you will ensure tool availability and resilience across UK networks. You will work with SIEM, network monitoring, and security tooling, performing playbook scripting, upgrades, and integration work to strengthen cyber defence.

Qualifications

• Strong coding and scripting background in PowerShell, Python and Regex.
• Experience with APIs, HTTP/S headers and JSON objects.
• Experience with proxies administration.
• Windows SMB and Unix/Linux NFS remote storage.
• IIS / Windows Web Server configuration, Active Directory/LDAP authentication.
• Experience with certificates and end-of-life refresh activities.
• VMware/Hyper-V virtualization and virtual switches.
• Experience with cyber security tooling deployment and maintenance.
• Experience with AI or machine learning technologies to optimise workflows or playbooks.
• Experience with SIEM technologies.

Responsibilities

• Lead on the technical aspects of cyber security appliance efficiency for alert tuning and log ingesting.
• Advise on new tool implementations and update existing capabilities.
• Ensure availability, readiness and resilience of cyber security toolsets within scope environments.
• Manage SOC tool mappings, integrations and feeds between solutions.
• Maintain SOC tool availability and optimisation; coordinate tool upgrades and patches.
• Support incident response and root cause analysis with security platforms.

Skills

PowerShell

Python

Regex

APIs (HTTP/S) usage

Tools

SIEM technologies

VMware

Hyper-V

Windows Server / IIS

Active Directory / LDAP

Proxy administration

Job description

World Class Defence Organisation seeks a Cyber Security Engineer to join the SOC within Digital Excellence UK. You will lead technical tasks to tune alerts, improve log ingestion, and expand tool capabilities.

Reporting to the Cyber Security Capability Manager, you will ensure tool availability and resilience across UK networks. You will work with SIEM, network monitoring, and security tooling, performing playbook scripting, upgrades, and integration work to strengthen cyber defence.