L3 SOC / Cyber Security Engineer - Threat Hunter / SIEM Sentinel

JR United Kingdom; Manchester; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

A renowned IT firm is seeking an L3 SOC/Cyber Security Engineer to join their dynamic team. This role offers the opportunity to work with cutting-edge technology and top-tier professionals in a collaborative environment. You will be involved in high-level incident response, proactive threat hunting, and developing detection capabilities. With flexible working arrangements and a strong focus on professional growth, this position is perfect for those looking to advance their career in cybersecurity. Join a company that values innovation and excellence in the tech industry.

Qualifications

• 4+ years in SOC environment, ideally MSSP.
• Experience in technical security roles considered.

Responsibilities

• Lead Cyber Incident Management and Major Incidents.
• Conduct proactive threat hunts and create detection capabilities.
• Monitor security alerts from SIEM platforms.

Skills

SOC experience

SIEM tools (MS Sentinel, AlienVault, Splunk)

Cybersecurity qualifications (CySA+, CompTIA SEC+)

Incident response

Forensic investigations

Education

Cybersecurity qualification or degree

Tools

MS Sentinel

AlienVault

Splunk

Job description

Social network you want to login/join with:

col-narrow-left

Client:

InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment

Location:

Manchester, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

08.05.2025

Expiry Date:

22.06.2025

col-wide

Job Description:

L3 SOC / Cyber Security Engineer - Threat Hunter / SIEM Sentinel – £55-65K + 25% Shift – Home / Office 2x per month

My client is one of the most recognisable names in IT and has some of the best people in the industry working for them.

They’re top partners with all the top Vendors, which means you get to work with the best technology, the best people, the best training, the best certification programmes, and the best environment to grow!

Why?

• Work with some of the best cyber consultants in the country.
• The pathway to do whatever you want in cyber is continuous.
• The latest, cutting-edge technology.

You will join a 24/7 SOC team, involved in the highest level of Incident Response activities, proactive threat hunting, and development of detection and use-case capabilities. You’ll be working alongside the engineering team to help find tuning and optimisation opportunities.

Candidates MUST have or be eligible to gain SC clearance upon hire.

Key Skills required:

• 4+ years’ experience working in a SOC environment – ideally MSSP. Experience in a technical security role is also considered.
• Experience with SIEM tools, such as MS Sentinel, AlienVault, or Splunk.
• A cybersecurity qualification, certification, or degree e.g. CySA+, CompTIA SEC+, or similar experience. Microsoft SC-200 Certs are desirable.
• A strong knowledge of sophisticated threat actor methodologies, along with experience in incident response and forensic investigations.

This business has a clear vision of where they want to be, have the right individuals steering the ship, and exceptional tech talent leading the way. Impressive customers, flexible working, and a company that truly cares.

Responsibilities:

• Leading escalated Cyber Incident Management, including Major Incidents and 3rd line analysis for ongoing investigations.
• Carrying out proactive threat hunts, RCAs, creation of detection capabilities.
• Monitor/hunt security alerts from security platforms (SIEM platforms, such as MS Sentinel, AlienVault, or Splunk).
• 4 days on, 4 days off – days and nights rota.
• Act on second-line security alerts, incidents, requests, and events to ensure threats, vulnerabilities, and breaches are managed successfully.
• Document and manage cases to utilise information for customer reports, providing insightful and intelligent recommendations.
• Facilitate recovery following the resolution of incidents.
• Provide subject matter expertise regarding exploits, threat actors, TTPs, etc.
• Maintain high quality across SLA’s and KPI’s.

Please hit the button to Apply and/or email [emailprotected] or call on 020 3004 8235 for further info.