Technology at Primark
Our technology team is actively shaping the next wave of advancements. Engaged with innovative initiatives, your expertise will propel our business into the future. Collaborating with a creative team of tech enthusiasts, you'll contribute your unique skills to fuel our technological advancements. Join Primark's Cyber Defence team as a SOC Engineer and help enhance the tools, detections and automation that protect a global retail organisation. You'll play a key role in improving security monitoring, strengthening threat detection capabilities and enabling effective incident response across a complex technology landscape.
Responsibilities
•Engineer, maintain and optimise security monitoring, detection and response tooling across the SOC environment.
•Develop and tune detection rules, alert logic, correlation searches, playbooks and automation workflows.
•Onboard and maintain security log sources across cloud platforms, identity services, networks, endpoints and business applications.
•Support integrations between SOC tooling, threat intelligence, vulnerability management, identity controls and incident response processes.
•Investigate and resolve false positives, missed detections, telemetry gaps and tooling performance issues.
•Collaborate with Cyber Defence, Technology Operations, IDAM, Security Architecture and third-party providers to improve monitoring coverage.
•Drive continuous improvement initiatives focused on automation, detection quality, threat visibility and response effectiveness.
Requirements
•4+ years' experience in Security Operations, Security Engineering or Detection Engineering.
•Hands-on experience with SIEM platforms, security monitoring, telemetry management and response automation.
•Experience onboarding, configuring and troubleshooting log sources across cloud, identity, endpoint, network and application environments.
•Strong understanding of threat detection, alert tuning, monitoring use cases and investigation workflows.
•Ability to identify and resolve false positives, telemetry gaps and detection coverage weaknesses.
•Experience with technologies such as Microsoft Sentinel, Splunk, EDR, XDR or SOAR platforms is highly desirable.
•Knowledge of KQL, SPL, Python or PowerShell and relevant cyber security certifications would be advantageous.
About Primark
At Primark, people matter. They're the beating heart of our business and the reason the company has grown from its first store in Dublin in 1969 to over 80,000 colleagues and over 500 stores in 20 countries today and growing.
