SOC Engineer

4Square Recruitment Ltd; Cambridge; Hybrid; GBP 48,000 - 80,000; Full time

Benefits offered by this job

Hybrid working with flexibility

On-site parking

25 days holiday

Opportunity to shape SOC function

Job summary

4Square Recruitment Ltd is partnering with a growing cyber security business relocating its SOC capability to the UK, seeking a Mid to Senior SOC Engineer to build and own parts of the SOC function in Cambridge.

This hands-on role spans SOC operations and engineering: proactive monitoring, threat hunting, incident response, SIEM tuning, rule building and automation, with hybrid working and a clear path to shape tooling and processes.

Qualifications

• Strong SOC/Security Operations experience.
• Detection engineering and alert tuning.
• Experience with KQL, SQL or similar query languages.
• Threat hunting and incident response experience.
• Scripting/automation using Python and/or PowerShell.
• Exposure to SOAR, playbooks or security automation.
• Comfortable working directly with clients and taking ownership of technical issues.

Responsibilities

• Proactive security monitoring and threat hunting
• Investigating and responding to security incidents
• Engineering and improving SIEM environments
• Building and tuning detection rules
• Supporting and maintaining client security platforms
• Scripting and automating SOC processes
• Helping develop and mature the UK SOC capability

Skills

SOC Operations

Threat Hunting

Incident Response

Python

PowerShell

SOAR/Playbooks

Tools

KQL

SQL

Job description

9:00am–5:30pm | Some out-of-hours support as required

ASAP Start

I’m working with a growing cyber security business that is relocating its SOC capability to the UK and looking for a Mid to Senior SOC Engineer to play a key role in building out the function.

This is a hands‑on position covering both SOC operations and engineering, supporting a portfolio of key clients while also helping shape the tooling, processes and detection capability around the SOC.

What you’ll be doing:

• Proactive security monitoring and threat hunting
• Investigating and responding to security incidents
• Engineering and improving SIEM environments
• Building and tuning detection rules
• Supporting and maintaining client security platforms
• Scripting and automating SOC processes
• Helping develop and mature the UK SOC capability

What we’re looking for:

• Strong SOC / Security Operations experience
• Detection engineering and alert tuning
• Experience with KQL, SQL or similar query languages
• Threat hunting and incident response experience
• Scripting/automation using Python and/or PowerShell
• Exposure to SOAR, playbooks or security automation
• Comfortable working directly with clients and taking ownership of technical issues

This could suit an experienced SOC Analyst looking to move further into engineering, or an established SOC Engineer who wants the opportunity to have real influence over how a SOC is built and developed.

The business is currently small and growing, so this person will have plenty of autonomy and the opportunity to become a central part of the technical team.

Benefits include:

• Salary up to £80,000 depending on experience
• 25 days holiday
• On-site parking
• Hybrid working with flexibility
• Significant opportunity to shape and grow the SOC function