We're working with a growing Cyber Security organisation looking to add a Cyber Security Engineer to their Security Operations team.
This is a hands‑on, client‑facing position where you'll play a key role in strengthening security operations across multiple client environments. Acting as an escalation point for SOC Analysts, you'll support complex incident investigations, lead client tabletop exercises, and help develop detection and response capabilities using Microsoft's security stack.
If you're looking for a role that combines technical security engineering, incident response, client engagement, and the opportunity to shape SOC capabilities, this is an excellent opportunity to make a tangible impact.
What You'll Be Doing
* Escalating and investigating complex security incidents from the SOC team
* Leading tabletop exercises to validate and improve client incident response processes
* Designing, building, and maintaining incident response playbooks
* Developing and managing Log Analytics workspaces
* Monitoring, investigating, and responding to threats using Microsoft Sentinel
* Leveraging Microsoft Defender to identify and remediate security threats
* Enhancing detection capabilities through rule tuning and content development
* Collaborating with clients and internal teams to improve security operations and response effectiveness
What We're Looking For
* Hands‑on experience with Microsoft Sentinel
* Hands‑on experience with Microsoft Defender
* Experience working within a SOC, Security Engineering, or Security Operations environment
* Strong understanding of cyber threats, attack methodologies, and incident response processes
* Experience creating or maintaining playbooks and detection content
* Ability to communicate confidently with both technical and non‑technical stakeholders
Location: Milton Keynes (4 days on‑site)
Salary: £40,000 - £50,000 annually
What's In It For You?
* Direct client engagement and exposure to real‑world security challenges
* Ownership of playbook development and log analytics capabilities
* Opportunity to influence and improve SOC operations
* Collaborative and fast‑moving security environment
* Ongoing training and professional development opportunities
#J-18808-Ljbffr