SOC Engineer – SIEM & SOAR Specialist

Nationwide Platforms; Lutterworth; On-site; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Competitive salary

25 days annual leave + bank holidays

Pension (Auto-enrolment)

Life Assurance

Health plan & lifestyle benefits

Job summary

LOXAM is seeking an IT SOC Engineer to join its Security Operations Centre at the Head Office in Lutterworth. You will develop and maintain SOC tooling, including SIEM/SOAR, to define a use case-driven logging, monitoring and response capability across the organisation.

The role reports to the Director of Security Operations and involves a mix of security operations, governance and IT collaboration. A strong MITRE framework knowledge and Splunk experience are essential.

Qualifications

• Developing and implementing SIEM solutions for large enterprises or SOC service providers.
• Experience with SOAR platforms and SOC processes.
• Strong understanding of modern and legacy enterprise technologies.

Responsibilities

• Develop content for a complex and growing SIEM infrastructure (use cases, dashboards, reports).
• Administer and monitor SIEM platform health and log source health.
• Monitor and triage security alerts, correlate events, and create threat scenarios.
• Translate threat intelligence into actionable security across tools.
• Support incident tracking and resolution with other teams.
• Build custom connectors/parsers for non-supported devices.
• Fine-tune security solutions with IT Operations to reduce false positives/negatives.
• Work with MITRE framework to map tactics and techniques.

Skills

SIEM engineering

SOAR

Python

MITRE framework

Splunk

Threat hunting

Incident triage

SOC tooling

Education

Degree-level qualification in technical/engineering/computing

Tools

SOAR platform

Splunk SIEM

Job description

LOXAM is seeking an IT SOC Engineer to join its Security Operations Centre at the Head Office in Lutterworth. You will develop and maintain SOC tooling, including SIEM/SOAR, to define a use case-driven logging, monitoring and response capability across the organisation.

The role reports to the Director of Security Operations and involves a mix of security operations, governance and IT collaboration. A strong MITRE framework knowledge and Splunk experience are essential.