IT SOC Engineer

Role Purpose

The IT Security Operations Centre (SOC) Engineer plays a key role in protecting the organisation’s systems, data, and people by monitoring, detecting, analysing, and responding to cyber security threats and incidents. Working within the Security Engineering function and with a 3rd party SOC service provider, this role helps ensure threats are identified early, incidents are handled effectively, and security controls continue improve as the organisation grows

• Monitor security alerts and events across systems, networks, endpoints, and cloud platforms
• Escalate incidents appropriately and support containment, remediation, and recovery activities
• Maintain accurate incident records, timeline, and post-incident learnings
• Analyse logs and alerts from security tools to identify patterns, trends, and indicators of compromise
• Work closely with 3rd party SOC provider to optimise SOC tooling
• Support tuning of alerts to reduce false positives and improve detection quality
• Support the development and implementation of SOC processes, playbooks, and procedures
• Stay up to date with current cyber threats, attack techniques, and defensive strategies
• Raise awareness about Information & Cyber Security across the business 

• Bachelor’s degree in Information Security, Information Systems, Information Technology or related discipline
• Experience working in a cyber security operations role
• Strong understanding of cyber security concepts, threats, and attack techniques
• Experience using security monitoring and response tools
• Ability to analyse security alerts and logs
• Familiarity with frameworks such as ISO27001, NIST.