SOC Engineer: Detection, Automation & Incident Response

Spectrum IT Recruitment; Milton Keynes; On-site; GBP 41,000 - 50,000; Full time

Job summary

Spectrum IT Recruitment is seeking a hands-on SOC Engineer to join a Cyber Security Operations team delivering services across finance, manufacturing, utilities and retail. You will operate, maintain and tune security monitoring platforms, manage log ingestion, develop detection rules with SOC Analysts, and automate security operations across critical infrastructure.

Onboarding new systems and documenting procedures are essential.

Qualifications

• Strong hands-on experience in security operations
• Ability to tune security monitoring and alerts
• Experience with log ingestion and telemetry pipelines
• Understanding of detection rules and playbooks
• Familiarity with Windows and Linux environments
• Experience in hybrid on-prem and cloud setups
• Experience in 24/7 SOC/NOC environments
• Scripting for automation in SOC workflows

Responsibilities

• Operate, maintain and tune security monitoring and alerting platforms.
• Manage and optimise log ingestion and telemetry pipelines.
• Work with SOC Analysts to develop detection rules, alerts and playbooks.
• Support security incident investigation, response and containment.
• Automate repetitive SOC processes using scripting and automation.
• Onboard new systems and infrastructure into SOC monitoring.
• Maintain accurate technical documentation and operational procedures.
• Work with engineering teams to embed security monitoring into new infrastructure and services.

Skills

Security monitoring

Detection tooling

PowerShell

Python

Networking basics

Windows & Linux

Log collection

SOC/NOC experience

Playbooks

Hybrid infra

Job description

Spectrum IT Recruitment is seeking a hands-on SOC Engineer to join a Cyber Security Operations team delivering services across finance, manufacturing, utilities and retail. You will operate, maintain and tune security monitoring platforms, manage log ingestion, develop detection rules with SOC Analysts, and automate security operations across critical infrastructure.

Onboarding new systems and documenting procedures are essential.