Senior Security Operations Engineer (SOC Engineer L3)

Synapri; Royal Leamington Spa; On-site; GBP 65,000 - 100,000; Full time

Job summary

Synapri is seeking a Senior Security Operations Engineer (SOC Engineer L3) to join its security function. The role is highly technical, focusing on SOC engineering, detection, SIEM/SOAR, automation and AI-driven operations.

You will design and improve monitoring across a large enterprise with emphasis on AI agents and agentic workflows for alert triage, investigation and response. Collaborating with Security, Infrastructure, Cloud and App teams, you will drive advanced security capabilities.

Qualifications

• Strong experience in SOC engineering and detection engineering.
• Experience with SIEM and security monitoring.
• Experience with SOAR and security automation.
• Experience with AI-driven security operations and agentic workflows.
• Incident response and threat hunting experience.

Responsibilities

• Design and optimize security monitoring, SIEM and detection capabilities.
• Onboard and manage security logs: ingestion, parsing, normalisation and enrichment.
• Develop and tune detection rules, correlation searches and threat detection use cases.
• Build SOAR playbooks, automated response workflows and security integrations.
• Integrate SIEM, SOAR, EDR/XDR, IAM and cloud security tools.
• Support incident response, threat hunting and investigations.
• Develop dashboards, reporting and metrics to improve SOC performance.
• Lead AI-driven security initiatives including AI agents and agentic workflows for alert triage, investigation and response.
• Work closely with Security, Infrastructure, Cloud and Application teams.

Skills

SOC engineering

SIEM engineering

SOAR

Detection engineering

AI agents

Security automation

Python scripting

Log onboarding

APIs

Cloud security tools

Tools

Logic Apps

EDR/XDR

Cloud security tools

Job description

The Role

We’re working with a leading organisation looking for a Senior Security Operations Engineer (SOC Engineer L3) to join their security function.

This is a highly technical role focused on SOC engineering, detection engineering, SIEM/SOAR, security automation and AI-driven security operations.

You’ll design and improve security monitoring, detection, response and automation capabilities across a large enterprise environment, with a particular focus on AI and agentic technologies.

Key Responsibilities

• Design and optimise security monitoring, SIEM and detection capabilities.
• Onboard and manage security logs, including ingestion, parsing, normalisation and enrichment.
• Develop and tune detection rules, correlation searches and threat detection use cases.
• Build SOAR playbooks, automated response workflows and security integrations.
• Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud security tools.
• Support incident response, threat hunting and security investigations.
• Develop dashboards, reporting and metrics to improve SOC performance.
• Lead AI-driven security initiatives, including AI agents and agentic workflows for alert triage, investigation and response.
• Work closely with Security, Infrastructure, Cloud and Application teams.

About You

We’re looking for someone with strong experience in SOC Engineering, Detection Engineering or Security Engineering.

You’ll ideally have experience with:

• SIEM Engineering and security monitoring
• Detection Engineering, including TTPs, IoCs and Threat Intelligence
• Detection tuning and false-positive reduction
• SOAR and security automation
• Log onboarding, parsing and normalisation
• AI agents / agentic workflows within security operations
• API integrations and Logic Apps
• Incident response and threat hunting
• Enterprise security tooling and automation
• Python scripting would be beneficial

Follow us on LinkedIn for new job listings, industry insights and career advice.