Cyber Security Engineer

Monitoring, triaging, investigating, and responding to security alerts and incidents within our Security Operations Centre (SOC)

Onboarding and integrating new log sources into Splunk, including writing and tuning data inputs, parsing configurations, field extractions, and validating data quality

Developing, refining, and optimising Splunk searches, dashboards, alerts, and detection logic to improve threat detection capability

Investigating security events, identifying patterns, determining severity, and escalating incidents in line with established playbooks and procedures

Contributing to the continuous improvement and uplift of SOC processes, runbooks, and detection logic

Collaborating with internal cloud, network, endpoint, and engineering teams to improve log coverage and security monitoring across environments

Keeping up with the evolving threat landscape and bringing practical ideas to improve the team’s capability

A degree in Cyber Security, Information Technology, Computer Science, or a related field

18 months to 4 years of hands-on SOC experience, including practical experience onboarding, validating, and tuning log sources in Splunk

Strong working knowledge of common attack techniques, threat indicators, and the MITRE ATT&CK framework, with the ability to apply this knowledge during investigations

Experience working with security technologies such as firewalls, IDS/IPS, endpoint detection tools, cloud security platforms, and related monitoring tools

Confident analytical and problem-solving skills, with the ability to assess complex security events and make sound escalation decisions

Clear written and verbal communication skills, with the ability to explain incidents, risks, and findings to both technical and non-technical stakeholders

Splunk certifications (e.g., Splunk Core Certified User or Power User)

Exposure to SOAR platforms or security automation

Experience with cloud environments (AWS, Azure, or GCP)

Relevant industry certifications such as CompTIA Security+, CySA+, or equivalent