SOC Engineer

At CGI, we help organisations protect their most critical systems by delivering resilient, innovative cyber security solutions that strengthen digital defence and operational confidence. As a Cyber Security SOC Engineer, you’ll play a vital role in maintaining and enhancing the technology platforms that underpin our Security Operations Centre (SOC) services. Working across cloud and on-premises environments, you’ll take ownership of technical challenges, improve system resilience and introduce automation that strengthens security operations. You’ll collaborate with talented cyber security specialists, contribute to high-impact projects and develop your expertise within a supportive community where your ideas are valued and your work makes a meaningful difference.



CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.



Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position.



Location: Bridgend, Wales or Reading, England

Working Pattern: Hybrid – minimum two days per week in the office

Security Clearance: Current UK Security Check (SC) clearance required

Nationality Requirement: UK nationals only, due to programme security restrictions

Travel: Occasional travel to Waterton and Newport data centres and other CGI offices as required

Profil recherché

In this role, you will take ownership of maintaining, securing and optimising the infrastructure that supports CGI’s Security Operations Centre services. Working across Linux, Windows and SIEM environments, you will ensure critical security platforms remain reliable, resilient and effective in supporting threat detection and incident response. You will contribute to the successful delivery of SOC projects, resolving technical challenges and implementing improvements that strengthen service performance and operational security.



You will have the opportunity to introduce innovative automation, enhance monitoring capabilities and improve infrastructure management across cloud and on-premises environments. Collaborating with geographically dispersed teams, you will share knowledge, contribute ideas and develop your technical expertise within a supportive community of security professionals committed to continuous improvement and exceptional client outcomes.



Key responsibilities include:

- Maintain & Secure: Administer, maintain and optimise Linux, Windows and SIEM platforms to ensure the continued availability and security of SOC services.

- Monitor & Troubleshoot: Investigate and resolve infrastructure, system and integration issues to maintain reliable security operations.

- Patch & Protect: Manage system updates, patching and lifecycle maintenance to reduce vulnerabilities and strengthen platform resilience.

- Integrate & Optimise: Support log collection, system integrations and security monitoring infrastructure to improve threat visibility and detection capabilities.

- Automate & Innovate: Develop and enhance scripts using Bash, PowerShell, Python or regular expressions to streamline operational tasks and improve efficiency.

- Configure & Support: Perform routine network configuration and troubleshooting, including basic changes to Fortinet firewalls and switches.

- Deliver & Improve: Contribute to SOC infrastructure projects, ensuring technical activities are completed successfully and aligned with service requirements.

- Collaborate & Share: Work closely with security analysts, engineers and infrastructure teams to resolve challenges, share expertise and strengthen service delivery.

- Document & Govern: Maintain accurate technical documentation, operational procedures and configuration records to support consistency and compliance.

Required qualifications to be successful in this role

To succeed in this role, you will bring practical experience administering and supporting IT infrastructure, with a strong understanding of Linux, Windows and the technologies that underpin modern security operations. You will be comfortable troubleshooting technical issues, supporting secure environments and using scripting to improve operational efficiency. A proactive mindset, excellent attention to detail and the ability to collaborate across distributed teams will help you deliver reliable services while continuing to develop your technical capabilities.



Essential skills and experience include:

- Linux Administration: Good working knowledge of Linux systems, with the confidence to perform intermediate-level administration, maintenance and troubleshooting tasks.

- Windows Administration: Practical experience managing Windows environments, including system configuration, updates, patching and issue resolution.

- Network Fundamentals: Understanding of networking principles, with familiarity with Fortinet firewalls and switches and the ability to perform straightforward configuration changes.

- Scripting & Automation: Experience using Bash, PowerShell, Python or regular expressions to support administration, troubleshooting and process automation.

- SIEM Technologies: Awareness of Security Information and Event Management platforms, particularly ArcSight or Microsoft Sentinel.

- Security Operations: Understanding of SOC environments, security monitoring infrastructure and the importance of reliable log collection and system integrations.

- Infrastructure Support: Ability to maintain and troubleshoot systems across on-premises and cloud environments.

- Technical Documentation: Experience producing clear, accurate technical documentation and operational procedures.

- Problem-Solving: Strong analytical skills, attention to detail and a proactive approach to identifying and resolving technical issues.

- Team Collaboration: Ability to work effectively within geographically dispersed teams, share knowledge and support colleagues.

Desirable skills and experience include:

- Monitoring & Service Management: Familiarity with Zabbix and Jira.

- Infrastructure Automation: Experience with Ansible, Terraform or similar infrastructure automation tools.

- DevOps & Version Control: Knowledge of Git, Azure DevOps and automated deployment workflows.

- Containerisation: Understanding of Docker, Kubernetes or related container technologies.

- Virtualisation: Experience supporting virtualised infrastructure and associated management technologies.

- Cloud Technologies: Familiarity with cloud infrastructure and security principles.

- Security Standards: Awareness of CIS benchmarks, NIST frameworks and NCSC guidance.



#LI-JS2