Overview
The Security Operations Engineer will play a critical role in managing escalated security incidents within a hybrid working environment, splitting time between office-based work and remote tasks. Collaborating closely with external security partners and acting as a subject matter expert, the engineer will lead investigations, optimize security technologies, and contribute to various security initiatives. This position demands a hands-on approach to incident response alongside strategic improvements in security operations.
Responsibilities
- Respond to escalated cyber security events and drive investigations through to resolution.
- Work closely with external security providers to improve monitoring and alert handling.
- Review security data to identify trends, risks, and improvement opportunities.
- Act as a technical contributor within cyber incident response activities.
- Support the administration and optimization of security technologies across the estate.
- Contribute to security initiatives including phishing, DLP, and identity security improvements.
Requirements
- Previous experience within Security Operations, SOC, or Cyber Defence environments.
- Strong technical troubleshooting L2/L3 and investigative skills across multiple platforms.
- Ability to analyze security incidents independently and communicate findings clearly.
- Experience working with security monitoring, detection, and response tooling.
- Knowledge of cyber incident management and security best practices.
- Comfortable working in fast-paced environments with a broad range of technologies.