About The Role
We are actively building diverse teams and welcome applications from everyone.
Role: SOC Engineer
Location: Birmingham (SCC operate hybrid working, which comprises of a mix of office and home working)
Contract Type: Permanent
Salary Package: £45k - £50 plus large company benefits, a broad flexible benefits scheme, and 2 paid-for volunteering days a year
Hours: 9.00 am – 5.30 pm Monday – Friday
Interview Process: 2-stage process
Why SCC?
- An inclusive workplace
- Excellent package: solid basic and company benefits
- Hybrid working & core hours in line with role requirements
- Career development and life‑long learning opportunities
- Opportunity to join Europe's largest privately‑owned IT Company
Role purpose:
The role of SOC Engineer will offer the successful candidate an exciting opportunity to work closely with the business across a broad range of managed service activities. Working across multiple technologies, and service lines associated to Cyber Security including but not limited to Managed Detection & Response (MDR), and Extended Detection & Response (XDR).
Essentially the role will support, through technical expertise, the provision and support of operational security capability, covering a range of tools, services and information, to manage and monitor the security posture of the IT environment; and to provide security incident handling.
The role will also form part of the core security team that deliver and drives continual service improvement across the internal SOC function covering SCC customers ensuring delivery of best of breed compliant security services in the most effective and efficient manner.
Key responsibilities:
- Be the technical engineering subject matter expert (SME) for the SOC team focused across SIEM, Vulnerability Scanning, EDR / MDR and other Security Technologies
- Perform business as usual and Project/Onboarding support for the security technologies, examples, log source health, offence triage, tuning, vulnerability scanning for investigation into findings and remediation and general industry knowledge to support the security deliverables across other services.
- Ensure appropriate governance and appropriate checking of access to our technology solutions is in place.
- Provide technical guidance and assurance to colleagues in the SOC, ensuring remediation, response and general advice is accurate and actionable.
- Stay abreast of emerging security threats, vulnerabilities, and controls, providing technical guidance and advice on threat response plans.
- Provide technical consultancy support in the development of the security technologies, processes and procedures, including the development of ‘Playbooks’ to ensure best practice is implemented when possible.
- Ensure defined technical compliance functional requirements for each onboarding project and ensure that they are fulfilled prior to going into service.
- Understand the implications of standards and regulations such as GDPR, ISO27001, NCSC Cloud Security Principles, NIS2, to inform decision making.
- Responsible for documentation of implementations, via technical documentation and run books.
Skills and experience:
- Solid and demonstrable comprehension of Cyber Security including malware, emerging threats, attacks, vulnerability management and standard accreditation frameworks.
- Possess excellent communication, presentational, critical thinking, problem solving, analytical and prioritisation skills.
- Drive policy, process and procedure, maintenance, and improvement.
- Own workload, ensuring work is delivered on time, and exceeds management's expectations.
- Have a strong emphasis on quality, accuracy and meeting deadlines.
- Be a self‑starter and proactive in driving forward security for the benefit of the business.
- Possess strong briefing and technical skills to enable you to present at all levels and across the business and its customers.
- To have already achieved SC Clearance or undergo the process for SC Clearance.
- Strong familiarity with Linux and Windows operating systems and cloud provider ecosystem.
- Hold a recognised Information Security qualification (e.g., CISSP, Microsoft SC‑900, SC‑200, AZ‑500, SC‑100, Tenable TCSE) or demonstrate strong capabilities in Security Engineering.
- Experience in a Managed Security Service Provider or Multi‑Tenanted environment.
- Proven experience in implementing technical designs into practice in line with project Timelines and Change Control Processes.
- Proficiency in EDR/MDR tools, firewalls, IDS/IPS, and vulnerability scanning solutions.
- Ability to write scripts in KQL, Python, PowerShell, or Bash for automating tasks and enhancing incident response capabilities.
- Experience of Change Control processes and ITIL Alignment.
- Security clearance or willingness to apply will be required for this role.
- Must be able to obtain the Government and/or Police Security levels required in order to meet the operational requirements of the role (no caveats) and as per the requirements stipulated in relevant customer contracts.
We are an equal opportunities employer
SCC is committed to providing equal opportunities and a proactive and inclusive approach to equality and diversity in employment. No applicant or employee will be treated less favourably than another on the grounds of a protected characteristic which are defined as sex, sexual orientation, age, disability, gender reassignment, trade union membership or non‑membership, marriage and civil partnership, pregnancy and maternity, race and religion or belief.
If you are selected for interview, and need any reasonable adjustments made for your interview, please let the SCC Talent Acquisition team know, at the point of scheduling.
#J-18808-Ljbffr