Senior Security Operations Engineer (SOC Engineer L3)

We're working with a leading organisation looking for a Senior Security Operations Engineer (SOC Engineer L3) to join their security function.

This is a highly technical role focused on SOC engineering, detection engineering, SIEM/SOAR, security automation and AI-driven security operations.

You'll design and improve security monitoring, detection, response and automation capabilities across a large enterprise environment, with a particular focus on AI and agentic technologies.

• Design and optimise security monitoring, SIEM and detection capabilities.
• Onboard and manage security logs, including ingestion, parsing, normalisation and enrichment.
• Develop and tune detection rules, correlation searches and threat detection use cases.
• Build SOAR playbooks, automated response workflows and security integrations.
• Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud security tools.
• Support incident response, threat hunting and security investigations.
• Develop dashboards, reporting and metrics to improve SOC performance.
• Lead AI-driven security initiatives, including AI agents and agentic workflows for alert triage, investigation and response.
• Work closely with Security, Infrastructure, Cloud and Application teams.

We're looking for someone with strong experience in SOC Engineering, Detection Engineering or Security Engineering.

You'll ideally have experience with:

• SIEM Engineering and security monitoring
• Detection Engineering, including TTPs, IoCs and Threat Intelligence
• Detection tuning and false-positive reduction
• SOAR and security automation
• Log onboarding, parsing and normalisation
• AI agents / agentic workflows within security operations
• API integrations and Logic Apps
• Incident response and threat hunting
• Enterprise security tooling and automation
• Python scripting would be beneficial

Follow us on LinkedIn for new job listings, industry insights and career advice.