L2 & L3 SOC Engineer - Threat Hunter

InfraView Ltd; Greater London, Manchester; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

An established industry player is seeking a skilled Cyber Security Engineer to join their dynamic SOC team. This role offers the chance to work with cutting-edge technology and collaborate with top cyber consultants. You'll be involved in high-level incident response, proactive threat hunting, and optimizing detection capabilities. With a clear career pathway and excellent training opportunities, this position is perfect for those looking to grow in the cybersecurity field. Enjoy flexible working arrangements and a supportive environment while making a significant impact on security operations.

Qualifications

• 2+ years in a SOC environment or technical security role.
• Experience with SIEM tools and cybersecurity certifications.

Responsibilities

• Lead Cyber Incident Management and analysis for investigations.
• Conduct proactive threat hunts and develop detection capabilities.
• Monitor security alerts from SIEM platforms.

Skills

SOC experience

SIEM tools (MS Sentinel, AlienVault, Splunk)

Cybersecurity certifications (CySA+, CompTIA SEC+)

Threat actor methodologies

Incident response

Forensic investigations

Education

Cybersecurity qualifications

Technical security role experience

Tools

MS Sentinel

AlienVault

Splunk

Job description

L2&L3 SOC / Cyber Security Engineer - Threat Hunter / SIEM Sentinel – £45-65K + 25% Shift – Home / Office 2x per month

My client is one of the most recognisable names in IT and has some of the best professionals in the industry.

They are top partners with leading Vendors, which means you will work with cutting-edge technology, the best team, and have access to excellent training and certification programs to support your growth.

Why join?

• Collaborate with some of the best cyber consultants in the country.
• Enjoy a clear career pathway in cybersecurity.
• Work with the latest, cutting-edge technology.

You will be part of a 24/7 SOC team involved in high-level Incident Response, proactive threat hunting, and developing detection and use-case capabilities. You’ll work alongside the engineering team to optimize tuning opportunities.

Candidates MUST have or be eligible to obtain SC clearance upon hire.

Key Skills required:

• At least 2 years’ experience in a SOC environment, preferably MSSP, or in a technical security role.
• Experience with SIEM tools such as MS Sentinel, AlienVault, or Splunk.
• Cybersecurity qualifications, certifications, or degrees e.g., CySA+, CompTIA SEC+, or similar experience. Microsoft SC-200 certifications are desirable.
• Strong knowledge of threat actor methodologies, incident response, and forensic investigations.

This company has a clear vision, excellent leadership, and top tech talent. They offer impressive clients, flexible working, and a supportive environment.

Responsibilities:

• Lead escalated Cyber Incident Management, including Major Incidents and analysis for ongoing investigations.
• Conduct proactive threat hunts, RCAs, and develop detection capabilities.
• Monitor and investigate security alerts from SIEM platforms like MS Sentinel, AlienVault, or Splunk.
• Respond to security alerts, incidents, and requests, managing threats and vulnerabilities effectively.
• Document cases and generate reports with insightful recommendations.
• Assist in recovery processes post-incident.
• Provide expertise on exploits, threat actors, and TTPs.
• Maintain high standards of service delivery in line with SLAs and KPIs.

To apply, click the button or contact Harley Robertson at [e-mail] or call 020 3004 8235 for more information.

Stay updated with the latest opportunities in Cloud & IT Infrastructure by registering with InfraView.