Security Engineer

The Role

This one-year contract position sits within a SOC Threat Operations team, requiring the engineer to lead and respond to escalated security incidents from initial triage through to containment and closure. Day-to-day work includes forensic analysis across host, network and cloud environments, correlating signals from SIEM and EDR tools, refining playbooks, and contributing to post-incident reviews.

Skills & Experience

Candidates need a strong background in incident response and digital forensics, with practical experience across SIEM, EDR platforms, and cloud investigation. Familiarity with ServiceNow SIR, automated IR workflows, and AI-assisted security operations (including Mate AI) is advantageous, alongside the ability to identify detection gaps and partner with Detection Engineering.

Who It Suits

This role suits an experienced security professional who thrives in a fast-paced SOC environment, is comfortable leading complex investigations independently, and enjoys mentoring peers. Those with a blend of forensic rigour and IR expertise who want a fully remote, fixed-term engagement will find this opportunity particularly well suited to their profile.