SOC Engineer

Marks and Spencer; City Of London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading retail company in the UK seeks a SOC Engineer to develop and manage the Security Information and Event Management (SIEM) platform. This role involves document design, implementing detection rules, and collaborating with security teams to enhance threat detection capabilities. The ideal candidate will have experience with Microsoft Sentinel and definite skills in threat detection and SIEM content development. Join and be part of an inclusive, dynamic business bringing exceptional service to every customer.

Benefits

20% colleague discount

Competitive holiday entitlement

Discretionary bonus schemes

Defined Contribution Pension Scheme

Training programmes

Wellbeing support access

Charity volunteer day

Qualifications

• Minimum one years' experience as a Security Engineer focused on detection.
• Demonstrable expertise with Microsoft Sentinel and Azure SIEM.
• Proficiency with parsing logs and onboarding data.

Responsibilities

• Develop and manage detection use cases aligned with threat frameworks.
• Document, design, and implement advanced detection rules in SIEM.
• Work with security operations to enhance threat detection strategies.

Skills

Threat detection expertise

Knowledge of MITRE ATT&CK

Documentation skills

Logic app creation

Data analytics

Tools

Microsoft Sentinel

Azure

Job description

All the details

The SOC Engineer is a hands-on professional responsible for developing, implementing and maintaining the organisation's Security Information and Event Management (SIEM) platform and other SOC tooling (including but not limited to: SOAR, Sandbox etc).

This role involves working closely with threat intelligence, incident response and security operations teams to proactively hunt for threats and translate threat information into effective detection and response capabilities.

What you'll do

• Document, design, implement, and tune advanced correlation rules, behavioural analytics and custom threat detection content within the SIEM
• Translate threat intelligence, threat hunt findings and red team results into actionable detection logic
• Develop and manage detection use cases to protect against threats aligned with frameworks like MITRE ATT&CK
• Act as the subject matter expert for SIEM content and detection strategies, providing technical guidance to the security operations team
• Work with other SOC engineers to align to best practices for rule development, data parsing and SIEM optimization

Who you are

• Minimum one years' experience as a Security Engineer or SIEM/Detection Engineer, with a focus on threat detection and SIEM content development.
• Demonstrable expertise with a major SIEM platform namely, Microsoft Sentinel and Azure.
• Knowledge of attacker tactics, techniques & procedures and experience with frameworks like MITRE ATT&CK.
• Proficiency in logic app creation, data analytics, parsers and log onboarding.
• Understanding of security principles, network protocols and common operating systems.
• Documentation skills.

What's in it for you

Being a part of M&S is exactly that - playing your part to bring the magic of M&S to our customers every day. We're an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.

Here are some of the benefits we offer that make working for M&S just that little bit more special

• After completing your probationary period, you'll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
• Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

Everyone's welcome

We're ambitious about the future of retail. We're innovating, disrupting, and leading the way into a more inspiring, digital era. It's an exciting time to be part of M&S.

To support us on our journey, we're building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.

Don't worry if you don't meet every single requirement of the job description. It's more of a guide to what's possible within the role. If you're passionate, ready to work hard, and think the role feels right for you, we'd love to hear from you. #hybridrole #LI-Hybrid #LI-OT1