Expert Service Operations Security SOC
Job Location:
Monthly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
At SITA we keep airports moving airlines flying smoothly and borders open. Our technology and communication innovations power the success of the global air travel industry.
Youll find us in 95% of international airports working closely with over 2500 transportation and government clients. Each partnership brings unique challenges and we thrive on delivering fresh solutions and cutting-edge tech to keep operations running like clockwork. We dont just move the world forwardwere proud to be recognized as aGreat Place to Workby our employees and certified in most of our growing locations.
Here we feel empowered supported and inspired to grow.
Are you ready to love your job The adventure begins right here with you at SITA.
As SOC Technical Authority you will provide expert technical leadership across SOC operations major security investigations detection engineering automation and continuous SOC maturity improvement.
You will be accountable for ensuring the technical quality of security monitoring triage investigation escalation detection coverage and automation practices across the SOC.
Reporting to the Senior Manager Service Operations you will be part of theSOC responsible for protecting the organization through advanced security monitoring threat detection incident escalation and continuous improvement of SOC capabilities.
- Act as the highest technical escalation point for SOC investigations monitoring activities and high-severity security events.
- Lead advanced security investigations by analyzing endpoint activity network events security telemetry and investigative evidence to identify malicious activity and attack techniques.
- Provide technical leadership and mentoring to SOC Analysts and Senior SOC Analysts across day-to-day operations and complex investigations.
- Own and continuously improve the technical quality of monitoring triage investigation escalation and detection coverage across the SOC.
- Lead Detection Engineering by designing implementing validating tuning and improving detection use cases correlation rules analytics and monitoring content.
- Map detection coverage against the MITRE ATT&CK framework to identify visibility gaps detection gaps and opportunities for improvement.
- Improve SIEM SOAR XDR and security monitoring integrations by enhancing automation workflows and operational efficiency.
- Leverage threat intelligence to strengthen monitoring detection investigation and response capabilities.
- Prepare technical reports detection gap assessments operational metrics and security recommendations for SOC leadership and senior stakeholders.
- Collaborate with SIRT and relevant security teams by providing investigative findings technical expertise and security context during incident escalations audits cyber simulations and security assessments.
- You have 5 to 8 years of experience in Security Operations or Cyber Defense including at least 3 years in a SOC role.
- You bring advanced expertise in security investigations detection engineering security monitoring and technical SOC operations.
- You have expert knowledge of SIEM SOAR and XDR platforms ideally including Elastic Cortex Microsoft Defender and CrowdStrike.
- You have strong hands-on experience with Python PowerShell APIs and security automation.
- You have strong knowledge of Azure or cloud security identity security and enterprise security environments.
- You understand and can practically apply the MITRE ATT&CK framework to improve detection coverage and investigation quality.
- You are experienced in using threat intelligence to enhance investigations monitoring detection logic and SOC readiness.
- You can communicate complex technical findings clearly through reports briefings and recommendations for technical and senior stakeholders.
- You hold a Bachelors degree in IT Cybersecurity Computer Science or a related field.
- You hold at least one recognized cybersecurity certification such as CISSP GCIH GCIA SC-200 CySA or ECIH.
- Experience supporting the evaluation testing and implementation of new security technologies and SOC capabilities.
- Experience participating in tabletop exercises cyber simulations audits and security assessments.
- Strong ability to translate detection gaps security risks and technical findings into actionable recommendations for SOC leadership and CISO-level stakeholders.
Were all about diversity. We operate in 200 countries and speak 60 different languages and cultures. Were really proud of our inclusive environment. Our offices are comfortable and fun places to work and we make sure you get to work from home too. Find out what its like to join our team and take a step closer to your best life ever.
Flex Week: Work from home up to 2 days/week (depending on your teams needs)
Flex Day: Make your workday suit your life and plans.
Flex-Location: Take up to 30 days a year to work from any location in the world.
Employee Wellbeing: We have got you covered with our Employee Assistance Program (EAP) for you and your dependents 24/7 365 days/year. We also offer Champion Health - a personalized platform that supports a range of wellbeing needs.
Professional Development: At SITA we believe growth fuels innovation. Our learning ecosystem offers access to world-class platforms and programs designed to help you thrive. From LinkedIn Learning Microsofts Enterprise Skills Initiative and Airport Council International -available to all employees-to specialized solutions like Pluralsight for technology upskilling Harvard Business Publishing for people leadership Stanford for strategic development and many others we align learning opportunities with your Development Plan and our business priorities. Your development journey is supported every step of the way.
Competitive Benefits: Competitive benefits that make sense with both your local market and employment status.
SITA is an Equal Opportunity Employer. We value a diverse support of our Employment Equity Program we encourage women aboriginal people members of visible minorities and/or persons with disabilities to apply and self-identify in the application process.
About Company
At SITA we lead one of the most exciting and advanced industries in the world. With us, there are no limits for people looking to explore the edges of possibility and beyond. We are the world’s leading specialist in air transport communications and information technology. Around the ... View more
