SOC Engineer: Detection, SIEM & Automation

Primark; Dublin; On-site; EUR 70,000 - 90,000; Full time

Job summary

Primark is seeking a SOC Engineer to join its Cyber Defence team in Dublin. You will engineer, maintain and optimise security monitoring, detection and response tooling across the SOC environment to protect the global retail organisation.

You will develop and tune detection rules, onboarding log sources across cloud, identity, endpoints and networks, while driving automation improvements and ensuring effective incident response.

Qualifications

• 4+ years in Security Operations, Security Engineering or Detection Engineering.
• Hands-on experience with SIEM platforms, security monitoring, telemetry management and response automation.
• Experience onboarding, configuring and troubleshooting log sources across cloud, identity, endpoint, network and application environments.
• Strong understanding of threat detection, alert tuning, monitoring use cases and investigation workflows.
• Ability to identify and resolve false positives, telemetry gaps and detection coverage weaknesses.
• Experience with technologies such as Microsoft Sentinel, Splunk, EDR, XDR or SOAR platforms is highly desirable.
• Knowledge of KQL, SPL, Python or PowerShell and relevant cyber security certifications would be advantageous.

Responsibilities

• Engineer, maintain and optimise security monitoring, detection and response tooling across the SOC environment.
• Develop and tune detection rules, alert logic, correlation searches, playbooks and automation workflows.
• Onboard and maintain security log sources across cloud platforms, identity services, networks, endpoints and business applications.
• Support integrations between SOC tooling, threat intelligence, vulnerability management, identity controls and incident response processes.
• Investigate and resolve false positives, missed detections, telemetry gaps and tooling performance issues.
• Collaborate with Cyber Defence, Technology Operations, IDAM, Security Architecture and third-party providers to improve monitoring coverage.
• Drive continuous improvement initiatives focused on automation, detection quality, threat visibility and response effectiveness.

Skills

Security Operations

Security Engineering

Detection Engineering

SIEM

Threat Detection

Python

PowerShell

KQL

Splunk

Microsoft Sentinel

EDR

XDR

SOAR

Tools

Microsoft Sentinel

Splunk

EDR

XDR

SOAR

Job description

Primark is seeking a SOC Engineer to join its Cyber Defence team in Dublin. You will engineer, maintain and optimise security monitoring, detection and response tooling across the SOC environment to protect the global retail organisation.

You will develop and tune detection rules, onboarding log sources across cloud, identity, endpoints and networks, while driving automation improvements and ensuring effective incident response.