SOC Platform Engineer - Public Sector

Hursley, England

Full-time

Hybrid

Entry Level

IBM Consulting UK FutureNow helps clients across public and private sectors deliver hybrid cloud, AI, and technology solutions while supporting continuous learning and career progression. The SOC Platform Engineer will design, build, integrate, and maintain secure monitoring platforms across cloud, hybrid, and on-premise environments, supporting SIEM, security tooling, log ingestion, automation, and SOC operations.

Apply Now

Responsibilities

Support the design, build, and maintenance of security monitoring platforms across cloud, hybrid, and on-premise environments
Assist with the deployment and integration of SIEM and cloud-native security platforms, including Google SecOps / Chronicle and similar technologies
Build and maintain log ingestion pipelines, ensuring reliable data flow across multiple systems
Support integration of security tooling across environments, including:
Cloud services (GCP, Azure, AWS)
EDR/XDR platforms
Network security technologies (e.g. firewalls such as Palo Alto)
Identity and access management systems
Configure and maintain data collection, parsing, and normalisation pipelines
Work closely with SOC analysts and detection engineers to support operational use cases
Contribute to automation of platform deployment and configuration using scripting or infrastructure-as-code
Monitor and support platform performance and health, including ingestion pipelines and system availability
Troubleshoot and resolve platform and integration issues with support from senior engineers where required
Produce and maintain technical documentation (runbooks, designs, configurations)
Support workshops and stakeholder interactions, with guidance from senior team members

Qualification

Required

Bachelor's Degree
• Strong background in infrastructure or cloud engineering, with experience across:
• GCP (desirable), Azure, or AWS
• Experience working with SIEM or security monitoring platforms (not necessarily as a primary role), such as:
• Google SecOps / Chronicle, Sentinel, QRadar, Splunk, Elastic or similar
• Experience supporting or building log ingestion pipelines or data integrations
• Exposure to integrating systems across:
• Cloud platforms
• Security tooling (EDR, network, identity)
• Basic understanding of SOC environments and security operations workflows
• Experience contributing to technical delivery, including implementation and configuration
• Proficiency in scripting or automation (e.g. Python, PowerShell)
• Ability to work in client-facing environments and collaborate with technical and non-technical stakeholders

Preferred

• Experience with modern SIEM or cloud-native security platforms, such as:
• Google SecOps / Chronicle, Microsoft Sentinel, Splunk, Elastic
• Exposure to DevSecOps practices, CI/CD pipelines, or infrastructure-as-code (e.g. Terraform)
• Experience working with security tooling integrations (EDR, SOAR, threat intelligence platforms)
• Understanding of cloud-native security services across AWS, Azure, or GCP
• Relevant certifications such as:
• SC-200, AZ-500, or cloud certifications
• Experience working in regulated or public sector environments
• Awareness of secure-by-design principles and modern security architectures

Benefits

Tools and policies to support your work-life balance from flexible working approaches
Sabbatical programs
Paid paternity leave
Maternity leave
An innovative maternity returners scheme
25 days holiday (in addition to public holidays)
Private medical cover
Dental cover
Optical cover
Online shopping discounts
An Employee Assistance Program
Life assurance
A group pension plan through salary sacrifice

IBM provides technology and consulting, including software, infrastructure systems, and cloud-based solutions.

Glassdoor