SOC Deployment Engineer

Phoenix enables digital transformation across the UK public sector, empowering organisations to innovate with cloud and hybrid infrastructures, data, AI, security and collaboration technologies.

We are now hiring a SOC Deployment Engineer to join our Security Operations Centre (SOC) and support the delivery of our managed security services. This role will focus on the deployment, configuration and optimisation of security tooling, helping ensure customer environments are onboarded effectively and monitored securely.

Working closely with SOC Analysts, Engineers and customers, you will support the implementation of SIEM and SOAR technologies, maintain SOC infrastructure and contribute to the ongoing improvement of our security operations capabilities.

• Design, deploy and support SIEM solutions to meet customer security requirements.
• Work with customers and internal stakeholders to gather requirements and support onboarding activities.
• Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability.
• Support the development and deployment of SOAR playbooks to streamline incident response processes.
• Maintain the availability and performance of SOC infrastructure, including servers, networks and security appliances.
• Configure and optimise log ingestion pipelines and security tool integrations.
• Manage SOC ticket queues and ensure service-level agreements are achieved.
• Ensure incidents are accurately logged, tracked and documented.
• Support the ongoing development and improvement of managed security services.
• Collaborate with analysts, engineers and service teams to improve operational effectiveness.
• Contribute to security tooling enhancements, process improvements and operational standards.

• Experience designing, deploying and supporting SIEM solutions, ideally Microsoft Sentinel.
• Experience working with Microsoft Azure environments.
• Good understanding of SOC operations and managed security services.
• Knowledge of security technologies, threat detection and security monitoring.
• Strong understanding of networking and communication protocols including HTTP, DNS and TCP/UDP.
• Understanding of malware techniques, persistence mechanisms and threat actor behaviours.
• Experience with scripting or automation languages such as Power Shell, Python, Bash or similar.
• Experience working with virtualisation technologies such as VMware.
• Understanding of cloud environments including Azure and AWS.
• Knowledge of security domains such as identity and access management, web security, intrusion detection and cloud security.
• Strong troubleshooting, analytical and problem-solving skills.
• Excellent communication and stakeholder engagement skills.

• Experience working within a SOC, cyber security or security engineering environment.
• Experience deploying and supporting SIEM technologies.
• Experience supporting enterprise security tooling and infrastructure.
• Experience working with security automation technologies beneficial.
• Relevant Microsoft, cyber security or infrastructure certifications desirable.

This role can be fully remote within the UK, with quarterly visits to our HQ in Pocklington (YO42).

Following a screen with the Recruitment Team, you can expect a two-stage interview process.

Due to the nature of our customer base and managed security services,
SC clearance is required for this role
. Candidates must either already hold active SC clearance or be eligible and willing to obtain and maintain it.

To obtain SC clearance, candidates will normally need to have lived continuously in the UK for at least five years and satisfy the relevant security vetting…