SOC Engineer

About the Role

Join Primark's Cyber Defence team as a SOC Engineer where you will play a crucial role in enhancing and maintaining the security monitoring, detection, and response tools protecting a global retail enterprise. You will collaborate with a dedicated team to improve threat detection capabilities, automate workflows, and support incident response within a complex technological environment.

Key Responsibilities

• Design, maintain, and optimize security monitoring and response tools within the SOC environment.
• Create, fine-tune, and deploy detection rules, correlation searches, alert logic, playbooks, and automated workflows.
• Integrate and manage security log sources spanning cloud services, identity platforms, networks, endpoints, and business applications.
• Support and enhance integration across SOC tools, threat intelligence, vulnerability management systems, identity controls, and incident response procedures.
• Analyze and address false positives, missed threat detections, telemetry deficiencies, and tooling performance issues.
• Work closely with Cyber Defence, Technology Operations, IDAM, Security Architecture teams and external providers to extend monitoring coverage.
• Lead continuous improvement initiatives that focus on automation, increasing detection accuracy, enhancing threat visibility, and strengthening response effectiveness.

Candidate Requirements

• Minimum of four years’ experience in Security Operations, Security Engineering, or Detection Engineering.
• Proficient in SIEM technologies, security telemetry management, monitoring, and response automation tools.
• Experienced in onboarding, configuring, and troubleshooting logs across cloud platforms, identity services, endpoint devices, network infrastructure, and business applications.
• Strong knowledge of threat detection methodologies, alert tuning, monitoring use cases, and investigative workflows.
• Adept at identifying and resolving false positives, filling telemetry gaps, and enhancing detection coverage.
• Familiarity with Microsoft Sentinel, Splunk, EDR, XDR, or SOAR platforms is highly desirable.
• Working knowledge of scripting or query languages such as KQL, SPL, Python, or PowerShell, alongside relevant cyber security certifications, would be advantageous.

About Primark

Primark values its people as the foundation of its success, having expanded from one store in Dublin in 1969 to over 500 stores with 80,000+ employees worldwide. Working at Primark means being part of a dynamic team that celebrates successes, embraces challenges, and fosters career growth.

Diversity and Accessibility

Primark is committed to providing reasonable adjustments during recruitment, including accommodations such as extended assessment time, sign language interpreters, mobility access, or assistive technologies. Candidates are encouraged to communicate accessibility requests to their talent acquisition representative.

Employment Conditions

All employment offers are conditional on background checks including right to work, references, education verification, and where necessary, criminal and financial checks.