SOC Engineer
IBEX RECRUITMENT LTD
Forton · posted 14 August 2026
Salary
£70,000 a year
Job type
full time
Location
Forton, Lancashire
Category
Information Technology
We recruiting for an exciting opportunity within a highly regulated environment.
Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below.
We're looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities.
This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform.
What you'll be doing: Engineering and maintaining Microsoft Sentinel , Defender XDR , and Log Analytics platforms Onboarding and normalising log sources across hybrid/cloud environments Writing and tuning KQL detection rules and analytics logic Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort Managing telemetry ingestion, parsers, and data retention for cost optimisation Producing platform health reports and identifying coverage gaps Mentoring junior engineers and contributing to team development Acting as technical SME during incidents What we're looking for: Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: xwzovoh SC-200 / AZ-500, ServiceNow SecOps, regulated sector experience (nuclear/defence/CNI).
What's in it for you: 30 days annual leave ( bank holidays) Hybrid working
- flexible on-site Opportunity to shape SOC engineering strategy in a critical environment Clear progression pathway (Junior ? Senior ? Lead) Certifications and training budget (SC-200, AZ-500, etc.) Work with cutting-edge Microsoft security tech
← Back to job search
Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below.
We're looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities.
This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform.
What you'll be doing: Engineering and maintaining Microsoft Sentinel , Defender XDR , and Log Analytics platforms Onboarding and normalising log sources across hybrid/cloud environments Writing and tuning KQL detection rules and analytics logic Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort Managing telemetry ingestion, parsers, and data retention for cost optimisation Producing platform health reports and identifying coverage gaps Mentoring junior engineers and contributing to team development Acting as technical SME during incidents What we're looking for: Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: xwzovoh SC-200 / AZ-500, ServiceNow SecOps, regulated sector experience (nuclear/defence/CNI).
What's in it for you: 30 days annual leave ( bank holidays) Hybrid working
- flexible on-site Opportunity to shape SOC engineering strategy in a critical environment Clear progression pathway (Junior ? Senior ? Lead) Certifications and training budget (SC-200, AZ-500, etc.) Work with cutting-edge Microsoft security tech