SOC Engineer - Contract

iO Associates; Bristol; Hybrid; GBP 83,025 - 101,475; Full time

Job summary

A leading technology provider is seeking a DV-cleared SOC Engineer to enhance its Security Operations Centre. This role focuses on detection engineering, SIEM optimisation, and automation, and requires strong skills in developing detection rules and supporting incident response in complex environments. The position offers a hybrid work model, requiring 3 days in Bristol. Candidates should have experience in SOC engineering and a good understanding of threat detection frameworks. Certifications such as CISSP or CISM are advantageous.

Qualifications

• Experience in SOC Engineering or advanced SOC Analyst roles.
• Strong hands-on experience with SIEM platforms and detection tuning.
• Scripting/automation skills (Python, PowerShell or similar).

Responsibilities

• Develop and tune SIEM detection rules and use cases.
• Automate SOC workflows and incident response processes.
• Support and lead incident investigations and escalations.

Skills

SOC Engineering experience

SIEM platforms expertise

Scripting skills (Python, PowerShell)

Threat detection frameworks understanding

Job description

Overview

£450 - £550 per day | Outside IR35 | Hybrid (3 days in Bristol)

We are seeking a DV-cleared SOC Engineer to support and enhance a Security Operations Centre for a leading technology provider. This role focuses on detection engineering, SIEM optimisation, and automation, alongside supporting incident response across complex environments.

Responsibilities

• Develop and tune SIEM detection rules and use cases (e.g., Splunk, QRadar)
• Automate SOC workflows and incident response processes (Python/PowerShell)
• Improve alert quality, reducing false positives and enhancing detection coverage
• Support and lead incident investigations and escalations
• Integrate threat intelligence into monitoring and detection
• Maintain SOC playbooks and support continuous improvement of tooling and processes

Skills & Experience

• Experience in SOC Engineering or advanced SOC Analyst roles
• Strong hands-on experience with SIEM platforms and detection tuning
• Scripting/automation skills (Python, PowerShell or similar)
• Understanding of threat detection and incident response frameworks (e.g., MITRE ATT&CK)

Certifications

Certifications (CISSP, CISM, CEH, etc.) are a plus

Requirements

• Active DV Clearance (essential)
• Hybrid: 3 days per week in Bristol