SOC Engineer - Contract

iO Associates; Bristol; Hybrid; GBP 83,025 - 101,475; Full time

Job summary

A leading technology provider seeks a DV-cleared SOC Engineer for a hybrid role in Bristol. This position focuses on detection engineering, SIEM optimisation, and incident response automation. Key responsibilities include developing detection rules in SIEM platforms like Splunk, automating workflows, and supporting incident investigations. The ideal candidate has experience in SOC Engineering, strong scripting skills in Python or PowerShell, and an understanding of threat detection frameworks. A minimum of 3 days per week on site is required.

Qualifications

• Proven experience in SOC Engineering or as an advanced SOC Analyst.
• Hands-on experience with SIEM platforms and tuning detection.
• Strong scripting and automation skills, particularly in Python and PowerShell.

Responsibilities

• Develop and tune detection rules and use cases in SIEM.
• Automate SOC workflows and incident response processes.
• Support and lead incident investigations and escalations.
• Integrate threat intelligence into monitoring and detection.
• Maintain SOC playbooks and improve tooling and processes.

Skills

SOC Engineering Experience

SIEM Platforms Expertise

Scripting/Automation (Python, PowerShell)

Threat Detection Understanding

Tools

Splunk

QRadar

Job description

We are seeking a DV-cleared SOC Engineer to support and enhance a Security Operations Centre for a leading technology provider. This role focuses on detection engineering, SIEM optimisation, and automation, alongside supporting incident response across complex environments.

SOC Engineer (DV Cleared)

£450 - £550 per day | Outside IR35 | Hybrid

Key Responsibilities

• Develop and tune SIEM detection rules and use cases (e.g., Splunk, QRadar)
• Automate SOC workflows and incident response processes (Python/PowerShell)
• Improve alert quality, reducing false positives and enhancing detection coverage
• Support and lead incident investigations and escalations
• Integrate threat intelligence into monitoring and detection
• Maintain SOC playbooks and support continuous improvement of tooling and processes

Skills & Experience

• Experience in SOC Engineering or advanced SOC Analyst roles
• Strong hands‑on experience with SIEM platforms and detection tuning
• Scripting/automation skills (Python, PowerShell or similar)
• Understanding of threat detection and incident response frameworks (e.g., MITRE ATT&CK)

Certifications (CISSP, CISM, CEH, etc.) are a plus

Requirements

• Active DV Clearance (essential)
• Hybrid: 3 days per week on site