SOC Deployment Engineer

Phoenix Software; Pocklington; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

Phoenix Software is hiring a SOC Deployment Engineer to join its Security Operations Centre. You will deploy, configure and optimise SIEM/SOAR tooling, onboard customer environments and monitor security operations across the UK.

You will work with SOC Analysts and customers, support onboarding, tune SIEM deployments, maintain infrastructure and improve processes. A SC clearance is required for this role, with UK residency for five years preferred.

Qualifications

• Experience designing, deploying and supporting SIEM solutions.
• Experience with Microsoft Azure environments.
• Knowledge of security technologies, threat detection and monitoring.
• Experience scripting or automation (PowerShell, Python, Bash).
• Experience with virtualization (VMware).
• Understanding of cloud security (Azure/AWS).

Responsibilities

• Design, deploy and support SIEM solutions to meet customer security requirements.
• Configure and fine-tune SIEM platforms for performance and detection.
• Develop and deploy SOAR playbooks for incident response.
• Maintain SOC infrastructure and log ingestion pipelines.
• Collaborate with analysts, engineers and service teams to improve operations.
• Manage SOC ticket queues and ensure SLAs.

Skills

SIEM design

Azure

Networking

Troubleshooting

Scripting

Security monitoring

Stakeholder engagement

Incident response

Education

Cybersecurity certifications desirable

Microsoft/Azure certifications desirable

Tools

Microsoft Sentinel

PowerShell

Python

Bash

VMware

Job description

Phoenix enables digital transformation across the UK public sector, empowering organisations to innovate with cloud and hybrid infrastructures, data, AI, security and collaboration technologies.

We are now hiring a SOC Deployment Engineer to join our Security Operations Centre (SOC) and support the delivery of our managed security services. This role will focus on the deployment, configuration and optimisation of security tooling, helping ensure customer environments are onboarded effectively and monitored securely.

Working closely with SOC Analysts, Engineers and customers, you will support the implementation of SIEM and SOAR technologies, maintain SOC infrastructure and contribute to the ongoing improvement of our security operations capabilities.

What will you be doing?

• Design, deploy and support SIEM solutions to meet customer security requirements.
• Work with customers and internal stakeholders to gather requirements and support onboarding activities.
• Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability.
• Support the development and deployment of SOAR playbooks to streamline incident response processes.
• Maintain the availability and performance of SOC infrastructure, including servers, networks and security appliances.
• Configure and optimise log ingestion pipelines and security tool integrations.
• Manage SOC ticket queues and ensure service-level agreements are achieved.
• Ensure incidents are accurately logged, tracked and documented.
• Support the ongoing development and improvement of managed security services.
• Collaborate with analysts, engineers and service teams to improve operational effectiveness.
• Contribute to security tooling enhancements, process improvements and operational standards.

What are we looking for?

• Experience designing, deploying and supporting SIEM solutions, ideally Microsoft Sentinel.
• Experience working with Microsoft Azure environments.
• Good understanding of SOC operations and managed security services.
• Knowledge of security technologies, threat detection and security monitoring.
• Strong understanding of networking and communication protocols including HTTP, DNS and TCP/UDP.
• Understanding of malware techniques, persistence mechanisms and threat actor behaviours.
• Experience with scripting or automation languages such as PowerShell, Python, Bash or similar.
• Experience working with virtualisation technologies such as VMware.
• Understanding of cloud environments including Azure and AWS.
• Knowledge of security domains such as identity and access management, web security, intrusion detection and cloud security.
• Strong troubleshooting, analytical and problem-solving skills.
• Excellent communication and stakeholder engagement skills.

Experience & Qualifications

• Experience working within a SOC, cyber security or security engineering environment.
• Experience deploying and supporting SIEM technologies.
• Experience supporting enterprise security tooling and infrastructure.
• Experience working with security automation technologies beneficial.
• Relevant Microsoft, cyber security or infrastructure certifications desirable.

Practical stuff

Where is the role based?

This role can be fully remote within the UK, with quarterly visits to our HQ in Pocklington (YO42).

How many interviews?

Following a screen with the Recruitment Team, you can expect a two-stage interview process.

Important Security Clearance

Due to the nature of our customer base and managed security services, SC clearance is required for this role. Candidates must either already hold active SC clearance or be eligible and willing to obtain and maintain it.

To obtain SC clearance, candidates will normally need to have lived continuously in the UK for at least five years and satisfy the relevant security vetting requirements.

Important BPSS Check

As part of our recruitment process and due to the nature of the work we do, all employees are required to undertake a BPSS check. While some employees may require further security clearance, the BPSS check is mandatory and all offers of employment are conditional upon successful completion.

Have you made it this far?

If you're still reading, we think there's a strong chance you might be our kind of person.

Here's the thing, research suggests many women and underrepresented groups don't apply unless they meet every requirement. Even if you don't tick every box above, we encourage you to introduce yourself.

We believe a diversity of perspectives and experiences makes a team stronger, and the stronger our team, the more successful we will be.