About The Client
Our client is a large UK public sector organisation responsible for delivering and protecting a significant portfolio of critical digital services.
As its technology estate continues to grow, the organisation is strengthening its security operations capability to improve threat detection, incident response, automation, and compliance with cyber security standards.
About The Role
Our client is looking for a Senior Security Engineer to strengthen its Security Operations capability, with a particular focus on Palo Alto Networks XSIAM.
You will help implement and optimise security monitoring, detection, and response capabilities while reducing manual operational processes through improved automation and integration.
The position will work closely with existing security and technology teams across a large and complex environment.
Key Responsibilities
- Implement, configure, and administer Palo Alto Networks XSIAM.
- Develop detection rules, security policies, and configurations to improve threat identification and response.
- Integrate XSIAM with existing security platforms and services to automate operational workflows.
- Monitor and investigate security alerts, incidents, and emerging threat patterns.
- Improve automation and analytics to reduce manual SOC activity and accelerate incident response.
- Work with internal teams and external partners to share threat intelligence and strengthen security controls.
- Provide technical security guidance to engineering, IT, and business teams.
- Support compliance with relevant UK Government security requirements and assurance activities.
- Assess new threats and technologies and recommend improvements to security operations.
- Produce clear reporting on incidents, trends, risks, and security effectiveness for senior stakeholders.
Essential Experience & Technical Skills
- Strong hands-on experience implementing, configuring, or managing Palo Alto Networks XSIAM.
- Significant experience within Security Operations, SOC engineering, or security monitoring environments.
- Strong knowledge of security monitoring, alerting, incident detection, investigation, and response.
- Experience developing and maintaining security detection rules and policies.
- Experience integrating security platforms, tools, and data sources.
- Knowledge of security automation and orchestration within SOC environments.
- Strong understanding of threat intelligence and emerging attack techniques.
- Experience analysing security events and identifying trends or potential threats.
- Strong technical troubleshooting and problem-solving skills.
- Experience working within large, complex, or highly regulated technology environments.
- Strong stakeholder communication and technical reporting skills.
- Current and active SC clearance at the point of application.
Desirable Experience
- Experience with additional Palo Alto Networks security technologies.
- Knowledge of the Cyber Assessment Framework (CAF) and UK Government cyber security standards.
- Experience supporting security assurance or compliance assessments.
- Familiarity with GovAssure or similar government security assurance programmes.
- Experience integrating SIEM/XDR platforms with wider security tooling.
- Knowledge of automated incident response and security workflow orchestration.
Why join?
Work on security operations across a large and complex digital estate.
Take a hands-on role in implementing and developing XSIAM capabilities.
Help improve SOC automation, threat detection, and incident response.
Work alongside established cyber security and technology teams.
Initial contract with potential for extension.