Security Operations Engineer — SOC & Incident Response

Ellison Institute of Technology Oxford; Oxford; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Enhanced holiday

Pension

Life Assurance

Income Protection

Private Medical Insurance

Hospital Cash Plan

Therapy Services

Perk Box

Electric Car Scheme

Childcare benefit

Job summary

The Ellison Institute of Technology Oxford invites a proactive Security Operations Engineer to join our cyber-security team. This hands-on role protects researchers, staff, and critical infrastructure across endpoints, servers, cloud platforms, and networks; you will monitor, detect, and respond to incidents while improving our security posture.

Collaborating with IT, governance, and legal teams, you will develop detection rules, support vulnerability management, and contribute to runbooks and

Qualifications

• Experience in Security Operations, a SOC, or Incident Response.
• Hands-on experience with SIEM platforms such as Azure Sentinel, Splunk, or Sophos Taegis.
• Familiarity with EDR tools including SentinelOne or CrowdStrike.
• Strong understanding of MITRE ATT&CK techniques.
• Working knowledge of Windows, Linux, identity systems, and networking.
• Cloud security experience (OCI preferred).

Responsibilities

• Operate and continuously enhance security monitoring across endpoints, servers, cloud platforms, and networks.
• T tune and maintain SIEM tools (including Sophos Taegis, SentinelOne EDR, and OCI security tooling) to improve detection accuracy.
• Investigate and triage security alerts, escalating and responding appropriately.
• Act as a responder for security incidents, supporting containment, eradication, and recovery.
• Produce clear incident documentation, including reports and root-cause analysis.
• Develop and refine detection rules, automation workflows, and threat-based use cases.
• Apply threat intelligence to improve detection coverage in complex research environments.
• Support vulnerability scanning, prioritisation, and remediation tracking.
• Collaborate closely with stakeholders to embed secure practices into day-to-day operations.
• Contribute to runbooks, documentation, audits, compliance activities, and risk assessments.

Skills

Security Operations

Incident Response

MITRE ATT&CK

Cloud security

Windows & Linux

Tools

Azure Sentinel

Splunk

Sophos Taegis

SentinelOne

CrowdStrike

Job description

The Ellison Institute of Technology Oxford invites a proactive Security Operations Engineer to join our cyber-security team. This hands-on role protects researchers, staff, and critical infrastructure across endpoints, servers, cloud platforms, and networks; you will monitor, detect, and respond to incidents while improving our security posture.

Collaborating with IT, governance, and legal teams, you will develop detection rules, support vulnerability management, and contribute to runbooks and