SOC Engineer - Cyber

Location: Birmingham (Hybrid – 3 days onsite)

Salary: £45,000 - £50,000 + Excellent Benefits

Contract Type: Permanent

The Role – SOC Engineer - Cyber

We’re looking for a hands-on SOC Engineer to join a rapidly growing Cyber Security function within a large enterprise technology environment. This is an opportunity to work in one of the most modern and well-equipped SOC environments in the market, supporting enterprise customers across a broad range of managed security services and cloud technologies.

This is a genuinely engineering-led role rather than a traditional SOC analyst position. You’ll be heavily involved in infrastructure, cloud security, security tooling, automation, and operational cyber engineering across enterprise-scale environments.

Working from a Birmingham-based SOC three days a week, you’ll play a key role in supporting customer environments, improving cyber capabilities, and helping showcase a cutting-edge SOC environment to visiting customers and stakeholders.

What’s in it for you as our Cyber SOC Engineer?

Salary of £45,000 - £50,000

Hybrid working environment

Excellent company benefits package

Flexible benefits scheme

Access to industry-leading SOC technology and tooling

Dedicated training and development time each week

Fully funded learning opportunities and partner-led certifications

Opportunities to attend conferences and industry events

Career progression within a large enterprise technology organisation

Exposure to enterprise-scale cloud and cyber environments

Supportive, collaborative, and highly technical team environment Duties as SOC Engineer - Cyber

As a Cyber SOC Engineer, you will:

Act as a technical escalation point and engineering SME across SOC technologies including SIEM, MDR/XDR, EDR, vulnerability management, and cloud security tooling

Support, maintain, and improve cyber security infrastructure across enterprise customer environments

Work closely with internal teams and customers to onboard, configure, and optimise security technologies and services

Investigate and resolve platform issues, security alerts, log source health problems, and tooling-related incidents

Configure and support technologies such as Microsoft Defender, Sentinel, CrowdStrike, Tenable, and related security platforms

Assist with vulnerability scanning, remediation support, and operational security improvements

Contribute to automation and scripting initiatives using tools such as KQL, PowerShell, Python, or Bash

Produce and maintain technical documentation, operational runbooks, and security playbooks

Support governance and compliance activities aligned to standards such as ISO27001, GDPR, and NCSC guidance

Work collaboratively across infrastructure, cloud, networking, and cyber teams to improve service delivery and operational resilience

Stay up to date with emerging cyber threats, technologies, and security best practice

Contribute to continual improvement initiatives across the SOC function Who are we looking for as our Cyber SOC Engineer?

We’re looking for a technically capable and proactive engineer who enjoys solving problems, learning new technologies, and working collaboratively in a fast-paced environment.

This role would suit someone from a SOC Engineering, Cloud Security, Infrastructure Security, or Cyber Engineering background who enjoys hands-on technical work rather than purely monitoring or analyst-based responsibilities.

You’ll ideally have experience with:

Microsoft Sentinel and Microsoft Defender

EDR/XDR/MDR technologies

Vulnerability management tools such as Tenable or Qualys

Azure, Microsoft 365, Intune, or AWS environments

Security tooling, infrastructure, and cloud platforms

Linux and Windows operating systems

SIEM technologies and security monitoring

Basic scripting or automation using KQL, PowerShell, Python, or Bash

ITIL environments and structured change control processes

Firewall, endpoint, or cloud security technologies We’d especially like to hear from candidates who are:

Strong communicators who can work confidently with both technical and non-technical stakeholders

Organised, collaborative, and eager to learn

Comfortable working in a customer-facing environment

Self-driven and proactive in solving problems

Able to take ownership while also working well within a team

Interested in developing their cyber engineering and cloud security expertise further Relevant certifications such as SC-200, SC-900, AZ-500, CISSP, or similar would be advantageous, but practical engineering experience is equally important.

Please note: Candidates must be eligible for UK Security Clearance (SC/BPSS), including having the right to work in the UK and meeting residency requirements.

INDHS