Opnet Security Engineer Incident & Vulnerability

QinetiQ Security & Defence Contractors; Greater London; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading security contractor in the UK is seeking an Opnet Incident & Vulnerability Security Engineer for their Corsham site. This role encompasses day-to-day SOC tooling maintenance, development of new SOC tools, and the integration of diverse log sources into SIEM platforms. The ideal candidate should have extensive experience with various SIEM and SOAR platforms, along with strong scripting skills in languages such as Python and PowerShell. The position supports hybrid working patterns, blending innovative technology with a collaborative work environment.

Benefits

Matched contribution pension scheme

Generous holiday allowance

Health Cash Plan

Employee discount portal

Volunteering Opportunities

Qualifications

• Proven hands‑on experience in implementation and configuration of SIEM and SOAR platforms.
• Ability to script and automate using languages like Python, Perl, or PowerShell.
• Demonstrable experience of applying the MITRE ATT&CK framework.

Responsibilities

• Support development and configuration of SOC tooling.
• Drive optimisation and automation of SOC tooling.
• Manage and maintain security devices daily.

Skills

SIEM and SOAR platforms

Python

Perl

PowerShell

BASH

Windows operating system

Linux operating system

Digital forensics

Malware analysis

Threat intelligence

Job description

Package : Competitive Salary Benefits

Role ID : SF18788

Are you ready to be part of the future At QinetiQ were not just imagining tomorrow we are creating it. From cutting‑edge defence technology to groundbreaking innovations our mission is to empower and protect lives. Join us as an Opnet Incident & Vulnerability Security Engineer at our Corsham site where you will have the opportunity to work with cutting‑edge technology in partnership with some of the most brilliant minds.

The Role

As a Opnet Incident & Vulnerability Security Engineer you will be responsible for the day‑to‑day maintenance optimisation and automation of SOC tooling across the Protect Detect and Respond functions within the NIST Cybersecurity Framework.

Day‑to‑day you’ll contribute to the development and configuration of new or revised SOC tooling support of forensic investigations monitoring adversary tactics techniques and procedures whilst maintaining compliance.

Your responsibilities will include

• Supporting the development implementation and configuration of new or enhanced SOC tooling ensuring alignment with the business needs
• Driving optimisation and automation across SOC tooling to enhance detection and response reduce analyst workload deliver full support to the Protect Detect and Respond functions
• Delivering full tooling visibility and independent assurance of all assets
• Managing administering and maintaining security devices dailys (e.g firewalls IDS / IPS SIEM SOAR EDR)
• Developing and tuning detection signatures automation scripts and correlation rules to improve SOC detection capabilities
• Integrating standard and non‑standard log sources into SIEM platforms

Essential experience of the Opnet Incident & Vulnerability Security Engineer

• Proven hands‑on experience in the implementation maintenance and configurations of a wide range of SIEM and SOAR platforms
• Previous experience of applying ISO 27001 : 2013 security and risk controls
• The ability to script and automate using Python Perl PowerShell BASH or equivalent languages to support SOC operations
• Demonstrable experience of applying the MITRE ATT&CK adversarial framework to map attacker TTPs and IoCs into actionable detection use cases
• Previous experience of digital forensics malware analysis and threat intelligence
• The ability to work with Windows and Linux operating systems with a strong background in the analysis of TTPs

Essential qualifications for the Opnet Incident & Vulnerability Security Engineer

We value difference and we dont have a fixed idea when it comes to background or education provided you can show the required level of experience and willingness to learn then we would like to hear from you.

This role is 37 hours per week based at Corsham. Hybrid working patterns available. Travel to customer sites will be expected.

Why Join QinetiQ

As we continue to grow into new markets around the world theres never been a more exciting time to join QinetiQ. The formula for success is our appetite for innovation and having the courage to take on a wide variety of complex challenges.

As a QinetiQ employee youll experience a unique working environment where teams from different backgrounds disciplines and experiences enjoy collaborating widely and openly as we undertake this exciting and rewarding journey. Through effective teamwork and pulling together youll get to experience what happens when we all share different perspectives blend disciplines and link technologies; constantly discovering new ways of solving complex problems in a diverse and inclusive environment where you can be authentic feel valued and realise your full potential. Visit our website to read more about our diverse and inclusive workplace culture.

Benefits

• Matched contribution pension scheme with life assurance
• Generous holiday allowance with the option to purchase additional days
• Options to join Health Cash Plan Private Medical Insurance and Dental Insurance
• Employee discount portal : Personal Accident Insurance Travel Insurance Restaurants Cinema Tickets and much more
• We are proud to support the Armed Forces community by honouring the Armed Forces Covenant and maintaining our Gold Award standard in the Defence Employer Recognition Scheme
• Volunteering Opportunities - helping charities and local community

Our Recruitment Process

We want to make sure that our recruitment process is as inclusive as possible and we aspire to bring out the best in our candidates by creating an environment where everyone feels value heard and supported. If you have a disability or health condition that may affect your performance in certain assessment types please speak to your Recruiter about potential reasonable adjustments.

Many roles in QinetiQ are subject to national security vetting being completed applicants who already hold the appropriate level of vetting may be able to transfer it upon appointment. A number of roles are also subject to additional restrictions which mean factors such as nationality or previous nationalities may affect the roles that you can be employed in.

Please note that all applicants for this role must be willing to go through SC Clearance.

UKSV National Security Vetting Solution : guidance for applicants - ()

Key Skills

Splunk,IDS,Network security,Computer Networking,Identity & Access Management,PKI,PCI,NIST Standards,Security System Experience,Information Security,Encryption,Siem

Employment Type : Full Time

Experience : years

Vacancy : 1