SOC Solutions Engineer - QRadar and Splunk Job at NTT DATA (Birmingham)

SOC Solutions Engineer - QRadar and Splunk

NTT DATA

Location:
United Kingdom , Birmingham ▼
London
Glasgow

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

Join a leading Managed Service Provider as a SOC Solutions Engineer specializing in QRadar and Splunk. Enhance security operations, develop incident response playbooks, and collaborate with teams to optimize threat detection strategies. Bring your expertise in SIEM platforms and a strong understanding of cybersecurity frameworks to make a significant impact.

Job Responsibility:

Deploy, configure, and maintain SIEM platforms (Splunk, QRadar, Sentinel, Defender, Chronicle)
Onboard and normalize log sources across cloud and on-prem environments
Develop and optimize analytical rules for threat detection, anomaly detection, and behavioural analysis
Design and implement incident response playbooks for various threat scenarios (e.g., phishing, lateral movement, data exfiltration)
Integrate playbooks with SOAR platforms (e.g., Microsoft Logic Apps, XSOAR) to automate triage and response
Continuously refine playbooks based on threat intelligence and incident feedback
Monitor and analyse security alerts and events to identify potential threats
Perform in-depth investigations and coordinate incident response activities
Collaborate with threat intelligence teams to enrich detection logic
Conduct threat modelling exercises using frameworks like MITRE ATT&CK, STRIDE, or Kill Chain
Translate threat models into actionable detection use cases and SIEM rules
Prioritize detection engineering efforts based on risk and business impact
Generate reports and dashboards for stakeholders on security posture and incident trends
Work closely with IT, DevOps, and compliance teams to ensure secure system configurations
Provide mentorship and guidance to junior analysts and engineers
Maintain accurate and up-to-date documentation of security procedures, incident response plans, and analysis reports
Support the creation of monthly reporting packs as per contractual requirements
Create and document robust event and incident management processes, Runbooks & Playbooks
Involvement in scoping and standing up new solutions for new opportunities
Assisting Pre-Sales team with requirements on new opportunities
Demonstrations of SOC tools to clients
Continual Service Improvement - Recommendations for change to address incidents or persistent events

Requirements:

Must be able to obtain SC Clearance or already hold SC clearance
Hands-on experience of IBM QRadar
Strong knowledge of log formats, parsing, and normalization
Experience with KQL, SPL, AQL, or other SIEM query languages
Familiarity with scripting (Python, PowerShell) for automation and enrichment
Deep understanding of threat detection, incident response, and cyber kill chain
Familiarity with MITRE ATT&CK, NIST, and CIS frameworks
Strong verbal and written English communication
Strong interpersonal and presentation skills
Strong analytical skills
Good understanding on network traffic flows and able to understand normal and suspicious activities
Good understanding of Vulnerability Scanning and management as well as Ethical Hacking (Penetration Testing)
Knowledge of ITIL disciplines such as Incident, Problem and Change Management
Ability to work with minimal levels of supervision
Willingness to work in a job that involves 24/7 on call
Minimum of 3 to 5 years of experience in the IT security industry, preferably working in a SOC/NOC environment
Preferably holds Cyber Security Certification e.g. ISC2 CISSP, GIAC, SC-200, Splunk Certified Admin/Power User, IBM QRadar Certified Specialist, Google Chronicle Security Engineer etc
Experience with Service Now Security suite
Experience with Cloud platforms (AWS and/or Microsoft Azure)
Excellent knowledge of Microsoft Office products, especially Excel and Word

What we offer:

Range of tailored benefits that support your physical, emotional, and financial wellbeing
Continuous growth and development opportunities
Flexible work options
Inclusive work environment
Range of Inclusion Networks such as: the Women’s Business Network, Cultural and Ethnicity Network, LGBTQ+ & Allies Network, Neurodiversity Network and the Parent Network

Additional Information:

Job Posted:
January 26, 2026

Employment Type:

Fulltime

Work Type:

Hybrid work

NTT DATA - All Job Offers

Job Link Share:

SOC Solutions Engineer - QRadar and Splunk

NTT DATA

Location:
United Kingdom , Birmingham ▼
London
Glasgow

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
January 26, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for SOC Solutions Engineer - QRadar and Splunk

Cyber Security Engineer

Cyber Security Engineer

Swedish Language Expert & Complaints Associate

Romanian speaking travel agent

Science Teacher

Science Teacher

Science Teacher

Assistant Manager

SOC Solutions Engineer - QRadar and Splunk

NTT DATA

Location:United Kingdom , Birmingham ▼LondonGlasgow

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:January 26, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for SOC Solutions Engineer - QRadar and Splunk

Cyber Security Engineer

Cyber Security Engineer

Swedish Language Expert & Complaints Associate

Romanian speaking travel agent

Science Teacher

Science Teacher

Science Teacher

Assistant Manager

Location:
United Kingdom , Birmingham ▼
London
Glasgow

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
January 26, 2026