SOC Engineer Milton Keynes - Hybrid working SC Clearance Sponsorship Available £55,000 + Bonus We're seeking a hands-on SOC Engineer to join a growing Cyber Security Operations Centre supporting a diverse portfolio of customers across multiple sectors This is a specialist SOC Engineering position focused on building, maintaining, and optimising the tools, telemetry, detections, and automation that enable SOC Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities - Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. - Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. - Onboard and manage security telemetry from a range of data sources. - Design, implement, and tune detection rules to improve alert quality and reduce false positives. - Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. - Support incident investigations, containment, and response activities. - Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. - Produce documentation, runbooks, and operational procedures. Skills & Experience - Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. - Strong scripting and automation skills (Python, PowerShell, Bash, KQL). - Experience with SOAR technologies and security automation. - Knowledge of detection engineering and threat hunting. - Strong understanding of Windows and Linux logging. - Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. - Experience within a SOC, NOC, or 24/7 operational environment. - Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. - Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications - Microsoft SC-200 - CompTIA Security+ / CySA+ - ISC2 CC or CISSP - GIAC GCIA - CEH - Cisco CyberOps or Fortinet certifications What's on Offer? - Opportunity to work within a mature and growing SOC environment. - Exposure to a wide range of customer environments and technologies. - Security Clearance sponsorship available for eligible candidates. - Clear opportunities to contribute to automation, detection engineering, and SOC improvement initiatives. Location: Milton Keynes (full-time onsite) Working Pattern: Shift rota including evenings, weekends, bank holidays on-call support. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.  Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously.  Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website

SOC Engineer Milton Keynes - Hybrid working SC Clearance Sponsorship Available £55,000 + Bonus We're seeking a hands-on SOC Engineer to join a growing Cyber Security Operations Centre supporting a diverse portfolio of customers across multiple sectors This is a specialist SOC Engineering position focused on building, maintaining, and optimising the tools, telemetry, detections, and automation that enable SOC Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities - Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. - Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. - Onboard and manage security telemetry from a range of data sources. - Design, implement, and tune detection rules to improve alert quality and reduce false positives. - Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. - Support incident investigations, containment, and response activities. - Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. - Produce documentation, runbooks, and operational procedures. Skills & Experience - Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. - Strong scripting and automation skills (Python, PowerShell, Bash, KQL). - Experience with SOAR technologies and security automation. - Knowledge of detection engineering and threat hunting. - Strong understanding of Windows and Linux logging. - Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. - Experience within a SOC, NOC, or 24/7 operational environment. - Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. - Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications - Microsoft SC-200 - CompTIA Security+ / CySA+ - ISC2 CC or CISSP - GIAC GCIA - CEH - Cisco CyberOps or Fortinet certifications What's on Offer? - Opportunity to work within a mature and growing SOC environment. - Exposure to a wide range of customer environments and technologies. - Security Clearance sponsorship available for eligible candidates. - Clear opportunities to contribute to automation, detection engineering, and SOC improvement initiatives. Location: Milton Keynes (full-time onsite) Working Pattern: Shift rota including evenings, weekends, bank holidays on-call support. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.  Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously.  Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website