SOC Engineer - SIEM & Threat Detection (Flexible Work)

The Nippon Telegraph and Telephone Corporation (NTT); Birmingham; On-site; GBP 60,000 - 90,000; Full time

Job summary

NTT DATA is seeking a SOC Engineer in the UK to strengthen security operations by deploying and tuning SIEM platforms, developing automated playbooks, and coordinating incident response in a fast-paced environment.

You will collaborate with threat intelligence teams, build detection rules, and contribute to ongoing security enhancements. The role offers exposure to leading SOC tooling and a chance to mentor junior staff.

Qualifications

• Hands-on experience with SIEM platforms and log sources onboarding.
• Ability to develop and tune SIEM use cases and rules.

Responsibilities

• Deploy, configure, and maintain SIEM platforms for threat detection.
• Design and implement incident response playbooks and automation.
• Monitor alerts, investigate incidents, and coordinate cross-team response.
• Perform threat modeling and develop SIEM use cases aligned with risk priorities.
• Create dashboards and reports to show security posture and trends.
• Mentor junior analysts and support pre-sales demonstrations.

Skills

SIEM platforms experience

Threat detection techniques

Incident response

Scripting automation

ITIL processes

Education

CISSP

GIAC

SC-200

Splunk Power User/Admin

QRadar Specialist

Chronicle Security Engineer

Tools

Splunk

QRadar

Sentinel

Microsoft Defender

Chronicle

KQL

SPL

AQL

Python

PowerShell

Job description

NTT DATA is seeking a SOC Engineer in the UK to strengthen security operations by deploying and tuning SIEM platforms, developing automated playbooks, and coordinating incident response in a fast-paced environment.

You will collaborate with threat intelligence teams, build detection rules, and contribute to ongoing security enhancements. The role offers exposure to leading SOC tooling and a chance to mentor junior staff.