Investigate and respond to security alerts across endpoint, network and cloud environments
Analyse logs and telemetry to identify indicators of compromise and potential threats
Support incident investigations and coordinate remediation with internal technical teams
Develop or refine detection rules and monitoring capability
Support vulnerability management activities and follow up on remediation actions
Assist with penetration testing coordination and remediation tracking
Contribute to security monitoring improvements and automation where appropriate
Support security compliance activities aligned to ISO27001 and Cyber Essentials Plus

Experience working within a security operations or cyber defence environment
Experience investigating security alerts and conducting incident analysis
Experience using SIEM platforms and endpoint detection and response tools
Strong understanding of networking and system behaviour (TCP/IP, DNS, HTTP/S)
Ability to analyse security data across endpoint, network and cloud environments
Experience working with security monitoring and threat detection tooling
Scripting capability in Python, PowerShell or Bash
Understanding of threat frameworks such as MITRE ATT&CK
Experience with tools such as Microsoft Sentinel, Splunk, Defender, CrowdStrike, Tenable or Qualys would be beneficial.

Salary: Transparent pay framework & promotion opportunities to recognise your contributions and performance.
Generous Annual Leave: Enjoy 25 days plus three days off at Christmas. (pro-rata)
Flexible Working: We're committed to a positive work-life balance, offering a hybrid working policy that prioritises your well-being and flexibility.
Comprehensive Wellbeing Support: Health Cash Plan, Access to Digicare+, Employee Assistance Programme, and more!
Professional Subscriptions: Invest in your growth and development.
Inclusive Employer: Be part of a diverse team with equity, inclusion, and flexibility at the core

Security Operations Engineer

Key skills