We are seeking a highly skilled SOC Consultant to help our clients strengthen their security operations. The ideal candidate will bring hands-on expertise in Security Operations Center (SOC) environments, strong advisory skills, and proven experience in leveraging platforms such as Splunk and other leading security technologies.

This role involves assessing client security postures, recommending improvements to detection and response capabilities, and guiding organisations to build resilient and mature SOC practices.

This position is part of our global Cyber Technical Services team, which includes adjacent areas such as Threat Intelligence and penetration testing.

While exact responsibilities will depend on project demands the below are some example areas:

• Engage with clients to assess their SOC maturity across technology, process, and people.
• Provide expert guidance on enhancing incident detection, response, and threat hunting capabilities.
• Recommend and help implement frameworks (e.g., MITRE ATT&CK, NIST CSF, ISO 27001) into SOC operations.
• Design, configure, and optimise SIEM solutions (Splunk required; others such as QRadar, Elastic, or Sentinel are advantageous).
• Support integration of threat intelligence platforms, SOAR tools, EDR/XDR solutions, and log management systems.
• Develop advanced detection rules, dashboards, and use cases to improve visibility and response.
• Define and improve SOC processes (incident response, threat hunting, escalation workflows).
• Conduct gap analyses and propose roadmaps for SOC capability maturity.
• Deliver workshops, training sessions, and knowledge-sharing to client SOC teams.

Candidate Expectations

• 4–7+ years of experience in cybersecurity, with at least 3 years in SOC operations or consulting.
• Experience with SIEM tools (Examples: Splunk, QRadar, Elastic, Azure Sentinel, etc.).
• Familiarity with SOAR platforms (Splunk SOAR, Palo Alto Cortex XSOAR, ServiceNow Security Operations).
• Understanding of network security, firewalls, IDS/IPS, and endpoint security.
• Knowledge of AI technologies and their applications for the security field an advantage.
• Experience with incident response frameworks and threat hunting methodologies.
• Passion for cybersecurity, continuous learning, and thought leadership.

What We Offer

• You’ll have a dedicated line Manager to help you develop your career and guide you on your journey through BAE Systems Digital Intelligence
• We will support your personal training and development in the areas of cybersecurity by sponsoring training courses and certification exams
• Work-life balance is important; you’ll get 18 days holiday a year (increases to 21 after 5 years’ service)
• We support hybrid working and give flexibility for team leads to decide on the balance between remote and office-based working
• Our benefits package includes private family medical cover, maternity (4 months), paternity (2 weeks), study leave & a Optical/Dental/Health screening allowance
• You’ll be part of our annual bonus and share award scheme

Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation.