Senior SOC Engineer

SOC Engineering Opportunities

Location: Warrington or West Cumbria, with flexible working options available

A unique place to grow your career

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in the UK's sustainable nuclear future.

The challenges we face are amongst the most complex anywhere in the world. We are using advanced technologies to shape, create and advance the world’s nuclear decommissioning knowledge and capability. That’s why our work is driven by people with a passion for problem-solving and innovation.

About the role

The SOC Engineering opportunities will support Sellafield Ltd to deliver expert engineering, optimisation and lifecycle management of SOC platforms, ensuring high availability, security and scalability to enable robust, proactive threat detection and response in alignment with business and regulatory requirements.

Key Responsibilities

• Engineer, optimise, and maintain SOC platforms (e.g., SIEM/SOAR such as Microsoft Sentinel, Defender suite, Log Analytics) to maximise security operations effectiveness.
• Onboard, validate, and document new log sources in line with operational detection requirements.
• Deploy, configure, and monitor platform agents and sensors across on-prem, cloud, and hybrid environments.
• Implement and tune analytics rules, detection logic and KQL queries, collaborating with threat detection and response teams.
• Develop, maintain, and improve automation workflows (e.g., SOAR playbooks, Logic Apps, scripts) to streamline detection and response.
• Produce and review reports on platform health, coverage gaps, and ingestion volumes to inform operational improvements and cost optimisation.
• Provide guidance and mentorship to SOC engineering colleagues and contribute to skills development across the team.
• Collaborate with ICT and business stakeholders to prioritise engineering work based on risk/business value.
• Ensure robust documentation, adherence to standards, and maintenance of secure engineering practices in line with frameworks such as NCSC CAF, MITRE ATT&CK, and NIST CSF.
• Monitor and manage performance and cost of cloud native security services (e.g., Azure security tooling), supporting optimisation efforts.
• Lead telemetry engineering, including designing parsers, data schemas, onboarding runbooks, retention and normalisation to support detection and forensics.
• Participate in incident response activities as the technical SME on SOC engineering and tooling.

Your Skills and Qualifications

• Significant experience in SOC platform engineering, SIEM/SOAR technologies, and security operations environments.
• Expertise with Microsoft Azure security services (Sentinel, Defender suite, Log Analytics), including analytics and automation.
• Proficient in scripting and automation (PowerShell, KQL, Python, Logic Apps, etc).
• Strong understanding of cyber security frameworks (MITRE ATT&CK, NCSC CAF, NIST CSF).
• Strong stakeholder engagement skills and the ability to communicate complex technical concepts clearly.
• Degree or equivalent qualification in computer science, cyber security, or related field.

Skills considered Desirable…

• Relevant Microsoft and/or security certifications (e.g. SC-200, AZ-500).
• Knowledge and experience in using ServiceNow SecOps.
• Experience in regulated environments (nuclear, defence, critical infrastructure).
• Membership of a cyber security professional body (CIISec, BCS, etc).

Why us?

At Sellafield Ltd, we are committed to supporting our employees in fulfilling their potential. With having 100 years of work in front of us, we offer comprehensive training and development opportunities, enabling you to feel inspired in your role. Whatever area you join us in, you’ll find a genuinely exciting and rewarding career.

Making sure our employees feel supported is important to us. Therefore, to help you get the most out of life in and outside of work, we also offer a range of employee benefits:

• You will benefit from an annual bonus of between 10% - 15%, made up of company and personal performance
• An attractive defined contribution pension scheme - the company will match up to 13.5% for a 7% employee contribution!
• 30 days annual leave + bank holidays. Plus, the ability to purchase an extra 2.5 days per year.
• The ability to carry over 10 days annual leave each financial year
• Paid Sick Leave
• Family Friendly Policies – Visit our Rewards & Benefits page to read more
• Cycle to Work Scheme
• Lifestyle Benefits sasra.co.uk
• Learning & Development Opportunities https://careers.sellafieldsite.co.uk/work-with-us/learning-and-development/
• Reward & Recognition Policies.
• Welfare & Employee Assistance Programme
• Free Aviva Health App & Annual Health Check
• MyDiscounts – Employee Savings & Discounts
• MyBenefits – A Charity Giving Scheme
• Many, many more! Click this link to visit our Rewards & Benefits page: https://careers.sellafieldsite.co.uk/work-with-us/rewards-and-benefits/

Sellafield Ltd is a unique place to grow your career, offering a remarkable blend of role variety, job security, personal growth, professional development, and truly significant work. This is your opportunity to tackle some of the biggest challenges in the nuclear, infrastructural and engineering worlds and create a clean and safe environment for generations to come. Explore Sellafield Ltd today.