Proactive SecOps Engineer: Detections, Automation & Hunting

OCS; City Of London; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Award-Winning Employer

Digital Learning

Retail Discounts

Professional Growth

Flexible Pay

Job summary

OCS UK & Ireland is seeking a proactive Security Operations Analyst to strengthen our cyber defence capability. You will drive improvements in detection, investigation and response across SIEM, EDR and email security, reducing friction for analysts and increasing effectiveness.

You will own detection engineering, automation and platform health, performing threat hunts and incident support while documenting runbooks and standards for knowledge sharing across the SecOps team.

Qualifications

• Extensive SecOps experience with multiple tools.
• Hands-on security engineer or senior SOC analyst with engineering responsibilities.
• Strong knowledge of at least one enterprise SIEM and one EDR/XDR platform.
• Scripting ability in Python, PowerShell or KQL; APIs and integrations.
• Understanding of MITRE ATT&CK and telemetry.
• Proactive mindset with evidence of end-to-end problem solving.
• Clear written documentation of detections and runbooks.

Responsibilities

• Build, test and tune SIEM/XDR/email detections mapped to MITRE ATT&CK.
• Develop automation to remove repetitive tasks using SOAR, scripting or low-code.
• Maintain configuration health and onboarding of new log sources.
• Conduct threat hunts and translate findings into detections or processes.
• Provide technical support during significant incidents and capture lessons.
• Maintain backlog and document standards and runbooks.

Skills

SIEM

EDR/XDR

Python

PowerShell

KQL

APIs

CI/CD

SOAR

MITRE ATT&CK

Detections tuning

Communication

Tools

SOAR

CI/CD

Dashboarding

APIs

Job description

OCS UK & Ireland is seeking a proactive Security Operations Analyst to strengthen our cyber defence capability. You will drive improvements in detection, investigation and response across SIEM, EDR and email security, reducing friction for analysts and increasing effectiveness.

You will own detection engineering, automation and platform health, performing threat hunts and incident support while documenting runbooks and standards for knowledge sharing across the SecOps team.