Security Engineer

Franklin Fitch; Reading; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Franklin Fitch is seeking an experienced Security Engineer to join our hybrid SOC team in Reading. You will design, build, and continuously improve technologies powering a high-performing SOC across SIEM, XDR, SOAR, and automation tooling.

You’ll mentor junior engineers and collaborate across teams to shape the SOC’s future direction. You'll work on designing and implementing SIEM, XDR, and SOAR platforms, developing automation, build log parsing pipelines, and ensure telemetry quality through

Qualifications

• Hands-on security engineering experience in SOC environments.
• Experience with SIEM architecture and deployment.
• Hands-on SOAR platforms and automation development experience.
• Knowledge of EDR/XDR technologies.
• Experience with cloud environments (AWS, Azure, or GCP).
• Scripting skills in Python or Go.
• Familiarity with log ingestion and data normalisation.
• Experience with vulnerability management tooling.
• Cyber threat intelligence ingestion (STIX/TAXII).
• Eligible for UK security clearance.

Responsibilities

• Design and implement SIEM, XDR, and SOAR platforms.
• Develop automation, orchestration workflows, and response playbooks.
• Build custom integrations, scripts, and log parsing pipelines.
• Ensure high-quality telemetry through data normalisation and ingestion strategies.
• Act as an escalation point for complex security engineering issues.
• Support onboarding of new environments and customers into SOC platforms.
• Contribute to internal documentation, standards, and deployment guides.
• Drive automation and efficiency across SOC processes.
• Enhance detection and response using threat intelligence and lessons learned.
• Support the evolution of SOC engineering maturity and capabilities.

Skills

SOC engineering

SIEM architecture

SOAR automation

EDR/XDR

Cloud environments

Python

Go

Log ingestion

Data normalisation

Vulnerability tooling

Threat intelligence (STIX/TAXII)

UK security clearance

Tools

AWS

Azure

GCP

Job description

Security Engineer | £60,000 - £70,000 + Bonus | Hybrid (x1/2/month) | MSP

This is a hands-on engineering role where you’ll design, build, and continuously improve the technologies that power a high-performing SOC. You’ll work across SIEM, XDR, SOAR, and automation tooling—developing scalable solutions that enhance detection and response capabilities.

You’ll also contribute to shaping the SOC’s future direction, working closely with leadership while mentoring junior engineers and collaborating across teams.

What You’ll Be Doing

• Design and implement SIEM, XDR, and SOAR platforms


• Develop automation, orchestration workflows, and response playbooks


• Build custom integrations, scripts, and log parsing pipelines


• Ensure high-quality telemetry through data normalisation and ingestion strategies

Operations & Investigation

• Act as an escalation point for complex security engineering issues


• Support onboarding of new environments and customers into SOC platforms


• Contribute to internal documentation, standards, and deployment guides


• Drive automation and efficiency across SOC processes


• Enhance detection and response using threat intelligence and lessons learned


• Support the evolution of SOC engineering maturity and capabilities

What We’re Looking For

• Strong experience in SOC engineering within a security operations environment


• Deep expertise in SIEM architecture and deployment


• Hands-on experience with SOAR platforms and automation development


• Solid knowledge of EDR/XDR technologies


• Experience with cloud environments (AWS, Azure, or GCP)


• Scripting skills (Python, Go, or similar)


• Familiarity with log ingestion, parsing, and data normalisation


• Vulnerability management tooling


• Cyber threat intelligence ingestion (e.g., STIX/TAXII)


• Eligibility for UK security clearance