SOC Engineer: Threat Detection & Incident Response (Hybrid UK)

Resillion; Birmingham; Híbrido; GBP 45 000 - 75 000; Tempo integral

Resumo da oferta

Resillion is seeking a SOC Engineer to join its Security Operations Centre in a hybrid UK role. You will monitor, investigate, and respond to security events while supporting improvement of SOC services.

You will work with SOC Analysts, Security Engineers, customers, and internal teams to ensure effective deployment and tuning of security technologies. The role offers exposure to incident response, vulnerability management, and continuous improvement of detection capabilities in a fast-paced

Qualificações

• 2–5 years in a SOC, MSSP, or cyber security operations environment.
• Experience using SIEM technologies, preferably Microsoft Sentinel.
• Experience creating, tuning, and maintaining SIEM detection rules and monitoring content.
• Strong understanding of networking concepts (TCP/IP, DNS, LAN/WAN, VPN, protocols).
• Knowledge of Windows Server, Linux, Azure and cloud technologies.
• Experience investigating security incidents and following incident management processes.

Responsabilidades

• Monitor, investigate, and analyse security alerts across customer environments.
• Triage and root cause analysis of security events and escalations.
• Contain, remediate, and recover from cyber security incidents.
• Analyse threat intelligence to identify emerging threats and trends.
• Tune and optimise SIEM platforms; develop rules, dashboards, and playbooks.
• Support vulnerability management activities including scanning and reporting.
• Participate in security assessments and recommend improvements.
• Produce incident reports, customer updates, and technical documentation.
• Collaborate with SOC teams, customers, and other functions to resolve issues.
• Onboard new customer environments into SOC monitoring services.
• Support security projects and ITIL-aligned incident, change and problem management.

Conhecimentos

SOC experience

SIEM knowledge

Networking knowledge

Cloud technologies

Analytical skills

Strong communication

Attention to detail

Formação académica

SC-200 Microsoft Security Operations Analyst

AZ-500 Microsoft Azure Security Technologies

Ferramentas

Microsoft Sentinel

Firewalls

EDR

Antivirus

IDS/IPS

Web proxies

Identity and access management

Encryption technologies

Descrição da oferta de emprego

Resillion is seeking a SOC Engineer to join its Security Operations Centre in a hybrid UK role. You will monitor, investigate, and respond to security events while supporting improvement of SOC services.

You will work with SOC Analysts, Security Engineers, customers, and internal teams to ensure effective deployment and tuning of security technologies. The role offers exposure to incident response, vulnerability management, and continuous improvement of detection capabilities in a fast-paced