SOC Engineer: Detection Engineering & Automation

Proactive.IT Appointments Ltd.; Milton Keynes; On-site; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Security clearance sponsorship

Exposure to diverse customer envs

Job summary

Proactive.IT Appointments Ltd. is seeking a hands-on SOC Engineer to join our Cyber Security Operations Centre, supporting a diverse customer base across sectors.

The role focuses on building, maintaining, and optimising tooling, telemetry, detections and automation to empower SOC Analysts in threat identification and response. Key responsibilities include deploying Microsoft Sentinel, developing SOAR workflows, onboarding telemetry, tuning detections, and proactive threat hunting.

Qualifications

• Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel.
• Proficient scripting in Python, PowerShell, Bash, and KQL.
• Experience with SOAR and security automation.
• Knowledge of detection engineering and threat hunting.
• Strong Windows and Linux logging understanding.
• Networking fundamentals (TCP/IP, DNS, firewalls, proxies).
• Experience in a SOC/NOC or 24/7 environment.
• Familiarity with MITRE ATT&CK, CVEs, and vulnerability management.
• Exposure to cloud security monitoring (Azure/AWS/M365).

Responsibilities

• Administer and optimise SIEM tooling and log pipelines.
• Develop and maintain SOAR workflows and automation.
• Onboard and manage telemetry from diverse data sources.
• Design and tune detection rules to reduce false positives.
• Conduct proactive threat hunting using SIEM/EDR.
• Support incident investigations and containment activities.
• Maintain health of SOC tooling and sensors.
• Produce runbooks and standard operating procedures.

Skills

SIEM engineering

Automation scripting

Threat hunting

SOC operations

Networking basics

Cloud security monitoring

MITRE ATT&CK knowledge

Vulnerability management

Tools

Microsoft Sentinel

SOAR technologies

Job description

Proactive.IT Appointments Ltd. is seeking a hands-on SOC Engineer to join our Cyber Security Operations Centre, supporting a diverse customer base across sectors.

The role focuses on building, maintaining, and optimising tooling, telemetry, detections and automation to empower SOC Analysts in threat identification and response. Key responsibilities include deploying Microsoft Sentinel, developing SOAR workflows, onboarding telemetry, tuning detections, and proactive threat hunting.