*Location:* Corsham
*Working Model:* Onsite – *5 days* per week
*Contract Length:* 24-month contract with possible extensions
*Security Clearance:* Active *DV required *(mandatory)
*Rate:* £700-£725
*IR35 Status:* Inside IR35 initially, with planned transition to Outside IR35
*Overview*
We are seeking an experienced *Security Operations Centre (SOC) Engineer* to support a large-scale, high-assurance defence programme within a secure government environment.
This role focuses on security monitoring, incident response, SIEM optimisation, and operational cyber defence, ensuring threats are detected, analysed, and mitigated effectively across the environment.
The successful candidate will work closely with security and infrastructure teams to maintain *c*ontinuous security operations, threat visibility, and system integrity.
*Clearance*
Due to the secure nature of the programme, candidates must hold *active UK Developed Vetting (DV) clearance*.
*Key Responsibilities*
*Security Monitoring & Incident Response*
* Monitor and analyse security events using *SIEM platforms (Elastic / ELK preferred)*
* Investigate, triage, and respond to security incidents and alerts
* Perform root cause analysis and document findings
* Develop and optimise detection rules, dashboards, and use cases
*Vulnerability Management & Endpoint Security*
* Support vulnerability scanning, assessment, and remediation tracking
* Manage endpoint protection tools (EDR / AV platforms)
* Investigate malware detections and suspicious activity
* Execute containment and remediation actions
*Email & Threat Protection*
* Monitor and respond to email-based threats (phishing, malware, DLP events)
* Support email security controls, filtering, and policy enforcement
*Log Management & SIEM Integration*
* Ensure effective log collection, forwarding, and ingestion into SIEM
* Validate log parsing, normalisation, and data integrity
* Troubleshoot log source and integration issues
*Identity & System Security*
* Support Active Directory administration and access control
* Manage account lifecycle, permissions, and privileged access
* Support security of Windows and Linux systems
*ITSM & Documentation*
* Work within ITSM tools (incident, problem, and change management)
* Maintain security documentation, SOPs, and incident records
* Support audit, compliance, and governance activities
*Essential Skills & Experience*
* Proven *hands-on SOC (Security Operations Centre) experience*
* Strong experience with *SIEM platforms (Elastic preferred)*
* Knowledge of *EDR, vulnerability management, and log analysis*
* Strong understanding of *Windows, Linux, and Active Directory*
* Experience working within *secure or defence environments*
* Strong analytical, incident response, and documentation skills
*Desirable*
* Experience with tools such as *Elastic, Tanium, Trend Micro, Trellix, or similar*
* Experience in *high-security / classified environments*
Job Types: Full-time, Fixed term contract
Contract length: 24 months
Pay: Up to £725.00 per day
Ability to commute/relocate:
* Corsham SN13 9FU: reliably commute or plan to relocate before starting work (required)
Application question(s):
* Are you a holder of an Active DV Clearance?
Experience:
* with SIEM tools (e.g. Elastic, Splunk)?: 5 years (required)
* responding to security incidents in a SOC environment?: 3 years (required)
Work Location: In person