Senior Security Operations Engineer

Join a growing cyber security team focused on strengthening Security Operations, Detection Engineering and Incident Response capabilities across complex enterprise environments.

Advanced Linux experience is required for this role.

Key Responsibilities

• Develop and tune detections, correlation rules and security use cases across SIEM, SOAR and EDR platforms.
• Lead incident investigations, threat hunting activities and security response efforts.
• Build and maintain security playbooks, runbooks and automated response workflows.
• Automate SOC processes using scripting and SOAR technologies to improve efficiency and reduce manual effort.
• Optimise security tooling, reduce false positives and improve overall security visibility.
• Conduct security readiness assessments, tabletop exercises and capability uplift initiatives.
• Stay across emerging threats, vulnerabilities and threat actor activity to continuously improve security controls.
• Secure and monitor Linux-based environments, ensuring strong visibility, detection coverage and incident response capability across critical infrastructure.

Skills & Experience

• 5+ years' experience in SOC, Detection Engineering, Threat Hunting or Incident Response roles.
• Strong experience with SIEM and SOAR platforms such as Splunk, Sentinel, XSOAR, Google SecOps, QRadar, XSIAM or similar.
• Experience with security automation (python, bash, Golang, shell etc)
• Advanced Linux administration and security experience, including log analysis, system hardening, troubleshooting, monitoring and incident response across enterprise Linux environments.
• Strong knowledge of Incident Response, Detection Engineering and Threat Hunting.
• Scripting experience with Python, Bash, PowerShell or similar.
• Understanding of MITRE ATT&CK, threat intelligence and modern attacker techniques.
• Experience tuning security tools and improving SOC effectiveness.

Nice to Have

• Experience with CrowdStrike, SentinelOne, Defender or similar EDR platforms.
• Vulnerability Management experience.
• Experience securing cloud and containerised environments.
• Exposure to AI-driven security operations and automation.
• Relevant security certifications.