L3 SOC / Cyber Security Engineer - Threat Hunter / SIEM Sentinel

JR United Kingdom; Greater London; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

An established industry player is seeking a skilled L3 SOC/Cyber Security Engineer to join their dynamic team. This role offers an exciting opportunity to work with cutting-edge technology and the best cyber consultants in the field. You'll be at the forefront of incident response and proactive threat hunting, ensuring the highest levels of security for clients. With a flexible working environment and a commitment to professional growth, this position is perfect for those looking to advance their career in cybersecurity. If you're passionate about tackling complex challenges and making a real impact, this opportunity is for you.

Qualifications

• 2+ years’ experience in a SOC environment, ideally MSSP.
• Experience with SIEM tools and cybersecurity certifications.

Responsibilities

• Leading Cyber Incident Management and analysis for ongoing investigations.
• Carrying out proactive threat hunts and creating detection capabilities.
• Monitoring security alerts from SIEM platforms.

Skills

SOC experience

SIEM tools (MS Sentinel, AlienVault, Splunk)

Cybersecurity certification (CySA+, CompTIA SEC+)

Incident response and forensic investigations

Threat actor methodologies

Education

Cybersecurity qualification or degree

Tools

MS Sentinel

AlienVault

Splunk

Job description

Social network you want to login/join with:

L3 SOC / Cyber Security Engineer - Threat Hunter / SIEM Sentinel, Buckinghamshire

Client:

InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment

Location:

Buckinghamshire, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Views:

3

Posted:

08.05.2025

Expiry Date:

22.06.2025

Job Description:

L3 SOC / Cyber Security Engineer - Threat Hunter / SIEM Sentinel – £45-65K + 25% Shift – Home / Office 2x per month

My client is one of the most recognisable names in IT and has some of the best people in the industry working for them.

They’re top partners with all the top Vendors, which means you get to work with the best technology, the best people, the best training, the best certification programmes, and the best environment to grow!

Why?

• Work with some of the best cyber consultants in the country.
• The pathway to do whatever you want in cyber is continuous.
• The latest, cutting-edge technology.

You will join a 24/7 SOC team, involved in the highest level of Incident Response activities, proactive threat hunting, and development of detection and use-case capabilities. You’ll work alongside the engineering team to help find tuning and optimisation opportunities.

Candidates MUST have or be eligible to gain SC clearance upon hire.

Key Skills required:

• 2+ years’ experience working in a SOC environment – ideally MSSP. Experience in a technical security role is also considered.
• Experience with SIEM tools, such as MS Sentinel, AlienVault, or Splunk.
• A cybersecurity qualification, certification, or degree e.g., CySA+, CompTIA SEC+, or similar experience. Microsoft SC-200 Certs are desirable.
• A strong knowledge of sophisticated threat actor methodologies, along with experience in incident response and forensic investigations.

This business has a clear vision of where they want to be, with the right individuals steering the ship and exceptional tech talent leading the way. Impressive customers, flexible working, and a company that truly cares.

Responsibilities:

• Leading escalated Cyber Incident Management, including Major Incidents and 2nd/3rd line analysis for ongoing investigations.
• Carrying out proactive threat hunts, RCAs, creation of detection capabilities.
• Monitoring/hunting security alerts from security platforms (SIEM platforms such as MS Sentinel, AlienVault, or Splunk).
• 4 days on, 4 days off – days and nights rota.
• Acting on Second Line security alerts, incidents, requests, and events to ensure threats, vulnerabilities, and breaches are managed successfully.
• Documenting and managing cases to utilise information for customer reports, providing insightful and intelligent recommendations.
• Facilitating recovery following incident resolution.
• Providing subject matter expertise regarding exploits, threat actors, TTPs, etc.
• Maintaining high quality across SLA’s and KPI’s.

Please hit the button to Apply and/or email [emailprotected] or call on 020 3004 8235 for further info.