Cyber SOC Engineer

Industry: Defence / Government / National Security

Clearance:
Current DV Required

An opportunity has arisen for a Cyber Security Engineer to join an established Security Operations Centre (SOC), working alongside a team of experienced Cyber Engineers and Security Analysts supporting critical secure environments.

This role will focus on monitoring, maintaining, and improving cyber security tooling and protective controls, while supporting security investigations, incident response activities, and the integration of new systems into the SOC environment.

The successful candidate will play a key role in enhancing monitoring, alerting, detection capability, and overall cyber resilience across the organisation.

• Monitor and report on the performance of cyber security tools and protective controls within the SOC environment
• Investigate, resolve, or escape technical and security issues across local and wider support teams
• Liaise with technology vendors to support issue resolution and platform optimisation
• Support Security Analysts with cyber security incident investigations and response activities
• Analyse and interpret system logs, alerts, and reports to improve monitoring and detection capability
• Develop and maintain technical documentation including installation guides, administration procedures, and change processes
• Create and improve cyber detection rules, collection policies, and monitoring use cases
• Support the onboarding and integration of new systems into SOC tooling and monitoring platforms
• Ensure monitoring, alerting, and prevention rules remain effective and up to date
• Maintain the integrity and quality of data stored and utilised across the cyber toolset

• Strong analytical skills with the ability to manipulate, interrogate, and analyse large data sets
• Experience working with SIEM technologies and Intrusion Prevention Systems (IPS) is desirable
• Understanding of Cyber Security Operations and SOC environments
• Knowledge of current cyber threats, attack techniques, and security best practices
• Advanced IT support and troubleshooting experience
• Ability to produce clear and accurate technical documentation
• Strong communication, interpersonal, and team collaboration skills
• Experience working within Defence, Government, or secure environments
• Familiarity with security monitoring and detection engineering
• Exposure to incident response and cyber investigation activities
• Understanding of log management and alert tuning

All mandatory qualifications and certifications must be verified by the supplier. Evidence of qualifications may be requested by the client.