SOC Developer

• Create, maintain, and optimise Microsoft Sentinel analytics rules, Logic Apps, and playbooks to support incident detection and response
• Support and enhance integrations between Microsoft Sentinel and other security and IT systems to improve visibility and automation
• Leverage APIs and automation to streamline SOC workflows and increase operational efficiency
• Design and deploy automated workflows to support routine SOC activities such as alert enrichment, notifications, and evidence gathering
• Work closely with SOC analysts, security engineers, and customer stakeholders to improve detection capability and overall security posture
• Monitor, maintain, and continually improve SOC tooling and automation to ensure effectiveness and reliability
• Provide operational support within an MSSP environment, responding to security incidents for public sector customers in line with agreed SLAs

• Hands-on experience with Microsoft Sentinel within a SOC or MSSP environment
• Experience building and maintaining automation using Azure Logic Apps and Sentinel playbooks
• Working knowledge of API integrations to support security tooling and workflows
• Strong written and verbal communication skills, with the ability to work with both technical teams and customers
• Solid technical understanding of IT and cloud security, including: Microsoft 365, Defender XDR, Entra ID (Azure Active Directory) and Azure Portal
• Must be based in the UK
• Must be eligible for SC and NPPV3 security clearance

Ongoing support for training and industry certifications