Join a growing cyber security team focused on strengthening Security Operations, Detection Engineering and Incident Response capabilities across complex enterprise environments.

Advanced Linux experience is required for this role.

Key Responsibilities
Develop and tune detections, correlation rules and security use cases across SIEM, SOAR and EDR platforms.
Lead incident investigations, threat hunting activities and security response efforts.
Build and maintain security playbooks, runbooks and automated response workflows.
Automate SOC processes using scripting and SOAR technologies to improve efficiency and reduce manual effort.
Optimise security tooling, reduce false positives and improve overall security visibility.
Conduct security readiness assessments, tabletop exercises and capability uplift initiatives.
Stay across emerging threats, vulnerabilities and threat actor activity to continuously improve security controls.
Secure and monitor Linux-based environments, ensuring strong visibility, detection coverage and incident response capability across critical infrastructure.

Skills & Experience
5+ years' experience in SOC, Detection Engineering,



Threat Hunting or Incident Response roles.
Robust experience with SIEM and SOAR platforms such as Splunk, Sentinel, XSOAR, Google SecOps, QRadar, XSIAM or similar.
Experience with security automation (python, bash, Golang, shell etc)
Advanced Linux administration and security experience, including log analysis, system hardening, troubleshooting, monitoring and incident response across enterprise Linux settings.
Solid knowledge of Incident Response, Detection Engineering and Threat Hunting.
Scripting experience with Python, Bash, PowerShell or similar.
Understanding of MITRE ATT&CK;, threat intelligence and modern attacker techniques.
Experience tuning security tools and improving SOC effectiveness.

Nice to Have
Experience with CrowdStrike, SentinelOne, Defender or similar EDR platforms.
Vulnerability Management experience.
Experience securing cloud and containerised environments.
Exposure to AI-driven security operations and automation.
Relevant security certifications.

📌 Senior Security Operations Engineer Haymarket
🏢 Talenza
📍 Haymarket