About this role
Salary: £70,000 - 70,000 per year
Requirements: Deep experience with Microsoft Sentinel, Defender suite, and KQLStrong scripting and automation skills, including PowerShell, Python, and Logic AppsSolid understanding of MITRE ATT&CK, NCSC CAF, and NIST CSFStrong stakeholder management skills with the ability to translate technical complexity for non-technical audiencesDegree in Computer Science, Cyber Security, or equivalent experienceDesirable: SC-200 or AZ-500 certification, ServiceNow SecOps experience, and experience in regulated sectors such as nuclear, defence, or CNI Responsibilities: Engineer and maintain Microsoft Sentinel, Defender XDR, and Log Analytics platformsOnboard and normalise log sources across hybrid and cloud environmentsWrite and tune KQL detection rules and analytics logicBuild SOAR playbooks and automation workflows to reduce manual effortManage telemetry ingestion, parsers, and data retention to optimise costProduce platform health reports and identify coverage gapsMentor junior engineers and contribute to team developmentAct as the technical SME during incidents Technologies: CloudPowerShellPythonSecurityServiceNow More:
We are recruiting for an exciting opportunity within a highly regulated environment. We are looking for SOC Engineers at both Junior and Senior levels to join our growing Cyber Security team, where we engineer and optimise Microsoft Sentinel, Defender XDR, and SOAR capabilities. This is an engineering-focused role, not a pure triage or analyst position, and offers the opportunity to build, tune, automate, and scale our detection platform. We offer 30 days annual leave plus bank holidays, hybrid working with flexible on-site arrangements, a clear progression pathway from Junior to Senior to Lead, and a training and certifications budget. You will work with cutting-edge Microsoft security technology and help shape SOC engineering strategy in a critical environment.
last updated 29 week of 2026