At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in the UK’s sustainable nuclear future.
The challenges we face are amongst the most complex anywhere in the world. We are using advanced technologies to shape, create and advance the world’s nuclear decommissioning knowledge and capability. That’s why our work is driven by people with a passion for problem-solving and innovation.
The SOC Engineering opportunities will support Sellafield Ltd to deliver expert engineering, optimisation and lifecycle management of SOC platforms, ensuring high availability, security and scalability to enable robust, proactive threat detection and response in alignment with business and regulatory requirements.
- Engineer, optimise, and maintain SOC platforms (e.g., SIEM/SOAR such as Microsoft Sentinel, Defender suite, Log Analytics) to maximise security operations effectiveness.
- Onboard, validate, and document new log sources in line with operational detection requirements.
- Deploy, configure, and monitor platform agents and sensors across on-prem, cloud, and hybrid environments.
- Implement and tune analytics rules, detection logic and KQL queries, collaborating with threat detection and response teams.
- Develop, maintain, and improve automation workflows (e.g., SOAR playbooks, Logic Apps, scripts) to streamline detection and response.
- Produce and review reports on platform health, coverage gaps, and ingestion volumes to inform operational improvements and cost optimisation.
- Provide guidance and mentorship to SOC engineering colleagues and contribute to skills development across the team.
- Collaborate with ICT and business stakeholders to prioritise engineering work based on risk/business value.
- Ensure robust documentation, adherence to standards, and maintenance of secure engineering practices in line with frameworks such as NCSC CAF, MITRE ATT&CK, and NIST CSF.
- Monitor and manage performance and cost of cloud native security services (e.g., Azure security tooling), supporting optimisation efforts.
- Lead telemetry engineering, including designing parsers, data schemas, onboarding runbooks, retention and normalisation to support detection and forensics.
- Participate in incident response activities as the technical SME on SOC engineering and tooling.
- Significant experience in SOC platform engineering, SIEM/SOAR technologies, and security operations environments.
- Expertise with Microsoft Azure security services (Sentinel, Defender suite, Log Analytics), including analytics and automation.
- Proficient in scripting and automation (PowerShell, KQL, Python, Logic Apps, etc).
- Strong understanding of cyber security frameworks (MITRE ATT&CK, NCSC CAF, NIST CSF).
- Strong stakeholder engagement skills and the ability to communicate complex technical concepts clearly.
- Degree or equivalent qualification in computer science, cyber security, or related field.
Skills considered Desirable:
- Relevant Microsoft and/or security certifications (e.g. SC-200, AZ-500).
- Knowledge and experience in using ServiceNow SecOps.
- Experience in regulated environments (nuclear, defence, critical infrastructure).
- Membership of a cyber security professional body (CIISec, BCS, etc).
At Sellafield Ltd, we are committed to supporting our employees in fulfilling their potential. With 100 years of work in front of us, we offer comprehensive training and development opportunities, enabling you to feel inspired in your role. Whatever area you join us in, you’ll find a genuinely exciting and rewarding career.
Making sure our employees feel supported is important to us. Therefore, to help you get the most out of life in and outside of work, we also offer a range of employee benefits:
- You will benefit from an annual bonus of up to 10% – 15%, made up of company and personal performance
- An attractive defined contribution pension scheme – the company will match up to 13.5% for a 7%
employee contribution!
- 30 days annual leave + bank holidays. Plus, the ability to purchase an extra 2.5 days per year.
- The ability to carry over 10 days annual leave each financial year
- Paid Sick Leave
- Family Friendly Policies – Visit our Rewards & Benefits page to read more
- Cycle to Work Scheme
- Lifestyle Benefits sasra.co.uk
- Learning & Development Opportunities https://careers.sellafieldsite.co.uk/work-with-us/learning-anddevelopment/
- Reward & Recognition Policies
- Welfare & Employee Assistance Programme
- Free Aviva Health App & Annual Health Check
- MyDiscounts – Employee Savings & Discounts
- MyBenefits – A Charity Giving Scheme
- Many, many more! Click this link to visit our Rewards & Benefits page:
https://careers.sellafieldsite.co.uk/work-with-us/rewards-and-benefits/
- The closing date for this vacancy is Monday 3rd August 2026.
- In the event of a high number of responses to any advert, Sellafield Ltd reserves the right to close the advert early. Once closed, the advert will be removed from our website. We encourage you to submit your application as soon as possible to avoid disappointment.
- As part of the application process you will be asked to provide evidence of your qualifications. Attaching them at application stage will ensure a smooth process and prevent delays.
- Please regularly check your Spam/Junk folders for news about this vacancy, correspondence could contain invitations to interview and other important updates.
- Sellafield Ltd are recognised as a Disability Confident Employer (Level 3). Disability Confident employers offer an interview to disabled applicants that meet the minimum criteria for a vacancy. Sellafield Ltd define the minimum criteria as the ‘essential skills’ which are listed on the vacancy notice. Whilst completing your application form, you will be able to indicate if you wish to be considered under the disability confident scheme. If you would prefer to discuss this directly with us, please contact the GBS Recruitment team on [email protected]
- Please be aware that this role is subject to achieving security clearance. This role requires higher level of National Security Vetting where applicants must typically have 5 or 10 years of continuous residency in the UK. Factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the level of clearance you’re able to achieve.
