SOC Engineer - Senior & Lead Vacancies

Addition Solutions LTD; Glasgow; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading cyber security firm in Glasgow seeks an experienced SOC professional to monitor security tools and manage incidents. This role involves guiding junior analysts and ensuring effective transitions within the team. Candidates should have a solid understanding of network protocols and operating systems, with hands-on experience in a SOC environment, particularly with SIEM tools like Splunk. The position offers competitive salary and opportunities for leadership development within a structured team.

Benefits

Competitive salary

Development pathways

Supportive team culture

Qualifications

• Experience working within a SOC (24/7 or similar) with SIEM.
• Certifications like Sec+, CySA+ or similar are a bonus.

Responsibilities

• Monitor security tools and SIEM platforms for suspicious activity.
• Review alerts, logs, and indicators for threats.
• Handle initial containment steps for confirmed incidents.
• Produce incident records and reports for tracking.
• Support junior analysts and ensure smooth team transitions.
• Maintain and optimise the SOC’s security tooling.

Skills

Networking (TCP/IP, DNS)

Operating systems (Windows, Linux)

Incident response practices

Communication skills

Analytical thinking

Education

Relevant degree or equivalent practical experience

Tools

Splunk

Job description

Introduction

This growing security team plays a critical role in keeping their organisation protected around the clock. They’re now adding an experienced SOC professional who can steady the ship, guide others on shift, and keep threats firmly under control.

Role Overview

Location: Glasgow

Package: Competitive salary + benefits

Industry: Cyber Security / SOC

What You’ll Be Doing

• Keeping a constant eye on security tools and SIEM platforms to spot suspicious activity early.
• Reviewing alerts, logs, and indicators to separate real threats from false positives.
• Handling initial containment steps for confirmed incidents and escalating when deeper investigation is needed.
• Producing clear incident records, reports, and handovers to support accurate tracking and future analysis.
• Supporting junior analysts on shift and ensuring smooth transitions between teams.
• Helping maintain and optimise the SOC’s security tooling so everything runs reliably.
• Applying strong analytical thinking, communication skills, and calm decision-making under pressure.
• Using your hands-on experience with Splunk in a live SOC environment.

Main Skills Needed

• Good grounding in networking (TCP/IP, DNS) and operating systems across Windows and Linux.
• Solid understanding of common cyber-attack methods and how they present in tooling.
• Experience working within a SOC (24/7 or similar) with SIEM and incident response practices.
• Strong communication skills, both written and verbal, with the ability to guide others.
• Relevant degree or equivalent practical experience; certifications like Sec+, CySA+ or similar are a bonus.

What’s in It for You

• Join a well-structured SOC team with clear processes and development pathways.
• Opportunity to build your leadership skills while staying hands‑on with technical work.
• Exposure to modern tooling, continuous learning, and a supportive team culture.
• A role where your work directly contributes to strengthening the organisation’s cyber resilience.

Equal Opportunity Statement

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.