SC-Cleared SOC Threat Detection Analyst

Lorien; Stevenage; On-site; GBP 180,000 - 210,000; Full time

Job summary

Lorien is hiring a Cyber Security Engineer in Stevenage to support the Cyber Security Capability Manager and help counter cyber threats across UK networks. You will work on back-end refresh, playbook scripting, tool upgrades, data on-boarding and incident investigation using SIEM and related platforms.

The role requires live SC Clearance with the client arranging DV Clearance, is inside IR35, and on a 12‑month contract with potential extension.

Qualifications

• Proven experience as a SOC Engineer.
• Live SC Clearance.
• Strong coding and scripting background – PowerShell, Python & Regex.
• Proven ability to work with APIs, including HTTP/S headers and responses, JSON Objects.
• Proven experience with Proxies administration and changes.
• Windows (SMB) and Unix/Linux (NFS) remote storage.
• Experience with applying certificates, software updates and end-of-life refresh activity.
• Experience with VMware/Hyper-V Virtual machines and virtual switches.
• Experience in setting up, implementing and maintenance of cyber security tooling.
• Experience with AI or machine learning technologies to assist with optimisation of workflows or playbooks.
• Experience with SIEM technologies.

Responsibilities

• Map and topology SOC toolsets, including integrations and feeds between solutions.
• Enrich visibility and optimize SOC tools via data modelling and tuning.
• Maintain primary SOC toolsets and ensure availability and performance.
• Ensure daily muster and availability of cyber security technologies in-scope environments.
• Track product lifecycle and advise on EOL/EOS roadmaps.
• Support SOC appliance upgrades coordination and execution.
• Assist with new capability implementation and integration to existing solutions.
• Lead playbook scripting changes and document/test fault findings.
• Act as SME on SOC connectivity across in-scope networks and infrastructure.
• Oversee back-end refresh of cyber security appliances, including patches and certificates.
• Attend CAB and incident/DR meetings and report impacts on cyber security alerts.
• Collaborate with DEX back office to maintain tool availability and recover outages.
• Support investigation activity using security platforms to identify root causes.

Skills

SOC Engineer

SC Clearance

PowerShell

Python

Regex

APIs & JSON

Proxies

Windows

Unix/Linux

VMware

Hyper-V

SIEM

Playbooks

Automation

Tools

SIEM tools

VMware

Hyper-V

Job description

Lorien is hiring a Cyber Security Engineer in Stevenage to support the Cyber Security Capability Manager and help counter cyber threats across UK networks. You will work on back-end refresh, playbook scripting, tool upgrades, data on-boarding and incident investigation using SIEM and related platforms.

The role requires live SC Clearance with the client arranging DV Clearance, is inside IR35, and on a 12‑month contract with potential extension.