Cyber Operations Security Engineer

Cyber Operations Security Engineer

Join our Cyber Operations Team! The Softcat Cyber Operations teams provide customers with cyber security monitoring, analysis, assessment, and remediation. We design and deploy effective security monitoring and assessment tools to protect client IT systems.

Success. The Softcat Way.
Passion. Intelligence. Fun. Responsible
; these are our core values. Softcat is a leading IT infrastructure provider, FTSE 250 listed company.

Working as part of our Cyber Operations team, you will be a key member of the Engineering team responsible for delivering the engineering strategy defined by the Cyber Operations Manager. Responsibilities include ensuring best practice, continual development of platforms, and maintaining high standards.

• Work with customers and internal stakeholders to identify development and improvement opportunities and continually evaluate our cyber practices and capabilities.
• Use a range of security tools, automation, and best practice across platforms.
• Deliver end‑to‑end SIEM/Sentinel engineering: onboarding customers, configuring data connectors, integrations, KQL, automation, dashboards, and reporting.
• Implement tuning, enrichment and optimisation across Sentinel and other SIEM tools.
• Maintain SIEM ingestion pipeline reliability by investigating and resolving issues across connectors, parsing, content, automation and transformation logic, while proactively monitoring latency, throughput and data fidelity.

• Knowledge of incident response frameworks such as NIST CSF, SOC2 or equivalent.
• Understanding of information security architecture and IT security policies relevant to logging.
• Organised, with strong written and oral communication skills and ability to translate technical information to non‑technical audiences.
• Customer focused and proactive in resolving technical issues.
• Experience with in a Managed Service Provider or MSSP is strongly preferred (similar role in another SOC acceptable).
• Experience with other SIEMs and related information security platforms (Alien Vault, Elastic, EDR/MDR, vulnerability management, etc.) desirable.

• Hybrid working – 2 days in the office and 3 days working from home.
• Flexible working hours – flex your start and finish times.
• Flexibility around school pick‑up and drop‑offs.

• Pension
• Share incentive plan
• Life Assurance
• Holiday
• Trips
• Vouchers
• Partner/family Benefits
• Maternity, Paternity and Adoption support

We believe that confidence gaps and imposter syndrome are real. If you have a disability or neurodiversity, we provide support and adjustments throughout the recruitment process. All information you share will be treated confidentially. Learn more about life at Softcat and our commitments to diversity and inclusion at our culture page.

Location:

Fieldhouse Lane, Marlow, Buckinghamshire, SL7 1LW
; 6th floor, The Goods Yard Building, 6 Goods Yard Street, St John’s, Manchester, M3 3BG
.