Overview

£450 - £550 per day | Outside IR35 | Hybrid (3 days in Bristol)

We are seeking a DV-cleared SOC Engineer to support and enhance a Security Operations Centre for a leading technology provider. This role focuses on detection engineering, SIEM optimisation, and automation, alongside supporting incident response across complex environments.

Responsibilities

• Develop and tune SIEM detection rules and use cases (e.g., Splunk, QRadar)
• Automate SOC workflows and incident response processes (Python/PowerShell)
• Improve alert quality, reducing false positives and enhancing detection coverage
• Support and lead incident investigations and escalations
• Integrate threat intelligence into monitoring and detection
• Maintain SOC playbooks and support continuous improvement of tooling and processes

Skills & Experience

• Experience in SOC Engineering or advanced SOC Analyst roles ...