SOC Engineer

Spectrum IT Recruitment; Milton Keynes; On-site; GBP 41,000 - 50,000; Full time

Job summary

Spectrum IT Recruitment is seeking a hands-on SOC Engineer to join a Cyber Security Operations team delivering services across finance, manufacturing, utilities and retail. You will operate, maintain and tune security monitoring platforms, manage log ingestion, develop detection rules with SOC Analysts, and automate security operations across critical infrastructure.

Onboarding new systems and documenting procedures are essential.

Qualifications

• Strong hands-on experience in security operations
• Ability to tune security monitoring and alerts
• Experience with log ingestion and telemetry pipelines
• Understanding of detection rules and playbooks
• Familiarity with Windows and Linux environments
• Experience in hybrid on-prem and cloud setups
• Experience in 24/7 SOC/NOC environments
• Scripting for automation in SOC workflows

Responsibilities

• Operate, maintain and tune security monitoring and alerting platforms.
• Manage and optimise log ingestion and telemetry pipelines.
• Work with SOC Analysts to develop detection rules, alerts and playbooks.
• Support security incident investigation, response and containment.
• Automate repetitive SOC processes using scripting and automation.
• Onboard new systems and infrastructure into SOC monitoring.
• Maintain accurate technical documentation and operational procedures.
• Work with engineering teams to embed security monitoring into new infrastructure and services.

Skills

Security monitoring

Detection tooling

PowerShell

Python

Networking basics

Windows & Linux

Log collection

SOC/NOC experience

Playbooks

Hybrid infra

Job description

SOC Engineer - Cyber Security Operations

Up to £45,000

We're looking for a hands‑on SOC Engineer to join a highly skilled Cyber Security Operations team, supporting customers across sectors including finance, manufacturing, utilities and retail.

Your work will involve helping maintain security tooling, improve visibility, support incident response and automate security operations across critical infrastructure.

The Role

• Operate, maintain and tune security monitoring and alerting platforms.


• Manage and optimise log ingestion and telemetry pipelines.


• Work with SOC Analysts to develop detection rules, alerts and playbooks.


• Support security incident investigation, response and containment.


• Automate repetitive SOC processes using scripting and automation.


• Onboard new systems and infrastructure into SOC monitoring.


• Support internal and customer cyber security engineering requirements.


• Maintain accurate technical documentation and operational procedures.


• Work with engineering teams to embed security monitoring into new infrastructure and services.

Key Skills

• Security monitoring, detection and response tooling


• PowerShell, Python or Bash


• Networking fundamentals - TCP/IP, DNS, firewalls and proxies


• Windows and Linux systems


• Log collection, monitoring and telemetry


• SOC, NOC or other 24/7 operational environments


• Detection logic, alert tuning and security playbooks


• Hybrid infrastructure - on-premises and cloud


• Security frameworks or structured detection methodologies

About You

• Strong troubleshooting and analytical skills


• A proactive approach to security operations


• The ability to work effectively under pressure


• Good communication and documentation skills


• Flexibility to participate in an out-of-hours on-call rota


• The ability to obtain Security Clearance (SC)

This is an excellent opportunity to join a technically strong SOC where you'll work across security engineering, detection, automation and incident response, while gaining exposure to a diverse range of enterprise environments.