£500 Per day
Undetermined
Hybrid
City of London
Summary: The SOC Engineer role involves joining a security operations team in London, focusing on real-time monitoring, investigation, and incident response within a modern enterprise security environment. Candidates must hold or be eligible for SC clearance and will be responsible for optimizing detection rules and collaborating with internal teams. The position is hybrid, requiring three days on-site and two days remote work. The contract is expected to last until March 31, 2026, with further extensions anticipated.
Key Responsibilities:
- Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint security tools.
- Conduct in-depth investigations of security events, escalating and containing incidents as required.
- Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency.
- Collaborate with internal teams to support security operations, threat analysis, and incident recovery.
- Produce clear incident documentation, reports, and recommendations for continuous improvement.
- Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows.
Key Skills:
- Sentinel, MDE, and MDI deployments
- Proven experience in a hands-on SOC Analyst role within an enterprise environment
- Strong understanding of security operations, threat detection, and incident response workflows
- Excellent communication skills and the ability to work effectively within a collaborative SOC team
Salary (Rate): £500 daily
City: London
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Job Title: SOC Engineer
Location: London - hybrid 3 days on-site 2 days remote
Start Date: Immediate
Contract length: 31/03/26 further extensions expected
Clearance Required: BPSS (must be obtained prior to onboarding)
Day rate: £400 - £500
Candidates must hold or be eligible for SC clearance
Our client is seeking a SOC Analyst to join a security operations team in London. The role is focused on real-time monitoring, investigation, and incident response across a modern enterprise security environment.
-
Key Responsibilities
- Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint security tools.
- Conduct in-depth investigations of security events, escalating and containing incidents as required.
- Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency.
- Collaborate with internal teams to support security operations, threat analysis, and incident recovery.
- Produce clear incident documentation, reports, and recommendations for continuous improvement.
- Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows.
Required Technical Expertise
- Sentinel, MDE, and MDI deployments
- Proven experience in a hands-on SOC Analyst role within an enterprise environment
- Strong understanding of security operations, threat detection, and incident response workflows
- Excellent communication skills and the ability to work effectively within a collaborative SOC team
Desirable Skills
- Experience with incident documentation and reporting
- Familiarity with security frameworks (MITRE ATT&CK, NIST, ISO 27001)
- Ability to adapt quickly to new tools, threats, and operational priorities
- Any relevant certifications (e.g., Security+, CySA+, Microsoft SC-series, GIAC)