SOC Platform Engineer (AI, Wazuh, Graylog and Linux)

About the role UK Cyber Defence Ltd is looking for a mid-level SOC Platform Engineer to help run the platform that underpins our Security Operations Centre. You will work directly with our Head of Threat Disruption, who built the platform, and you will learn it thoroughly, share its day-to-day running and progressively take ownership of parts of it, so that the knowledge lives in a team rather than in one head. This is a platform and infrastructure role rather than a triage-desk role. First and second line alert analysis is carried out by Emily, our AI analyst. You will make sure the alerts she works from arrive, are correct and can be trusted, and you will be the engineer she turns to when she meets something she cannot close herself. The role is also client-facing: speaking to customers by telephone, on Teams and in chat is a normal part of the week. Your first year is a structured training year. We do not expect you to know our platform or Emily on the first day. By the end of the year, we expect you to be able to run the platform and handle Emily''s escalations without needing to ask. Key responsibilities You will operate and maintain our multi-tenant Wazuh manager estate, including the managers, the load-balanced agent enrolment and event paths, agent groups and the per-client portals. You will run the Graylog and OpenSearch logging tier behind it, keeping the cluster healthy, managing index lifecycle policies and hot, warm and cold tiers, and planning capacity. You ..... full job details .....