SOC Engineer

SmartSourcing plc; Milton Keynes; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm is seeking a Lead SOC Analyst / SOC Engineer for a 12-month contract in Milton Keynes or Glasgow. The role requires experienced professionals with a background in Splunk, eligible for DV or SC Security Clearance. Key responsibilities include monitoring security tools, incident triage, and initial incident response, along with reporting and documentation. This position offers a daily pay rate of £620-£653 and involves working in a continuous 24/7 shift pattern.

Qualifications

• Experience with monitoring security tools including SIEM systems.
• Eligible for DV or SC Security Clearance.
• Ability to perform incident triage and initial incident response.

Responsibilities

• Monitor security tools to detect suspicious activity.
• Analyse alerts to determine genuine security incidents.
• Perform initial containment actions for confirmed incidents.
• Create detailed tickets and reports for detected incidents.
• Provide support and direction to juniors on the shift.
• Manage and optimise security tools.

Skills

Experience of Splunk in a Security Operations Centre (SOC)

Foundational understanding of networking concepts (TCP/IP, DNS, etc.)

Operating systems (Windows, Linux)

Certifications: CompTIA Security+, Cybersecurity Analyst (CySA+)

Education

Bachelor's degree in Computer Science or Cyber Security

Job description

Lead SOC Analyst / SOC Engineer (12mths) – Glasgow or Milton Keynes

For our client in Glasgow or Milton Keynes, we are looking for experienced SOC analysts and SOC engineers for a 12 month contract with daily pay of £620–£653 (inside IR35, Umbrella Company).

Job title: Cyber Security Lead SOC Analyst – Splunk, Security Cleared

Payment is £ (Apply online only) per day. The role is inside IR35, in a Developed Vetting (DV) Security cleared environment.

You will hold a current DV or SC Security Clearance, or be eligible to undertake.

The role requires working as part of a 24/7 shift pattern, including weekends and bank holidays.

Start date: To start in the New Year.

Skills and Experience Required

• Experience of Splunk in a Security Operations Centre (SOC).
• A bachelor's degree in Computer Science, Cyber Security, or relevant experience.
• A foundational understanding of networking concepts (TCP/IP, DNS, etc.), operating systems (Windows, Linux), and common cyber‑attack techniques.
• Certifications such as CompTIA Security+, Cybersecurity Analyst (CySA+), or a similar certification are a significant bonus to the role.

Key Responsibilities

• Continuous Monitoring: Monitor security tools, including SIEM systems, to detect suspicious activity. Be the first to see potential threats and respond efficiently and professionally against defined processes.
• Incident Triage: Analyse alerts and logs to determine whether an event is a genuine security incident or a false positive. Follow established procedures to classify and prioritise incidents.
• Initial Incident Response: For confirmed incidents, perform initial containment actions, such as isolating affected systems, and escalated the incident to a Level 2 or 3 analyst for deeper investigation.
• Reporting and Documentation: Create detailed tickets and reports for all detected incidents, documenting findings and the steps taken. Crucial for tracking incidents and for future analysis.
• Managing: Provide direction and support to the junior member of the shift and handover to the next shift leader.
• Tool Management: Assist in the maintenance and optimisation of security tools, ensuring they are working correctly and effectively.

Please apply online in the first instance.

SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity. We are committed to promoting equality and inclusion for all.