SOC Engineer

Overview

£450 - £550 per day | Outside IR35 | Hybrid (3 days in Bristol)

We are seeking a DV-cleared SOC Engineer to support and enhance a Security Operations Centre for a leading technology provider. This role focuses on detection engineering, SIEM optimisation, and automation, alongside supporting incident response across complex environments.

• Develop and tune SIEM detection rules and use cases (e.g., Splunk, QRadar)
• Automate SOC workflows and incident response processes (Python/Power Shell)
• Improve alert quality, reducing false positives and enhancing detection coverage
• Support and lead incident investigations and escalations
• Integrate threat intelligence into monitoring and detection
• Maintain SOC playbooks and support continuous improvement of tooling and processes

• Experience in SOC Engineering or advanced SOC Analyst roles
• Strong hands-on experience with SIEM platforms and detection tuning
• Scripting/automation skills (Python, Power Shell or similar)
• Understanding of threat detection and incident response frameworks (e.g., MITRE ATT&CK)

Certifications (CISSP, CISM, CEH, etc.) are a plus

• Active DV Clearance (essential)
• Hybrid: 3 days per week in Bristol