Intermediate to Senior SOC Engineer

Intermediate / Senior SOC Engineer (Security Operations Centre Engineer)

Join a team of information security professionals with strong technical expertise and experience in addressing evolving cyber threats. The team focuses on understanding complex security challenges and delivering clear practical and actionable solutions to protect organisational data.

KPAS:

• Design implement and optimise enterprise cybersecurity monitoring and incident response capabilities
• Maintain and enhance organisational security posture through detection automation and response processes

Security Platform Engineering:

• Implement and manage security monitoring solutions (SIEM cloud monitoring)
• Integrate log sources and develop dashboards for visibility

SIEM Administration & Optimisation:

• Configure and maintain SIEM platforms (Sentinel Splunk QRadar LogRhythm Elastic)
• Develop and tune correlation rules
• Reduce false positives and enhance alert quality
• Create custom alerting mechanisms

Incident Response & Threat Management:

• Investigate complex security incidents
• Lead incident response and coordinate containment eradication and recovery
• Perform root-cause analysis

Security Automation:

• Implement and support SOAR platforms
• Automate repetitive SOC tasks
• Develop scripts and workflows for alert enrichment and response

Technical Environment:

• SIEM EDR/XDR IDS/IPS Firewalls WAF Threat Intelligence
• Cloud security: Azure AWS GCP
• Systems: Windows Server Linux Active Directory Entra ID
• Scripting: PowerShell Python Bash REST APIs

Minimum Experience:

• Intermediate: 35 years cybersecurity experience
• Senior: 510 years experience

Minimum Qualifications & Certifications:

• Degree in Cybersecurity / IT / related field (or equivalent experience)
• Security CySA SC-200 AZ-500 CISSP GIAC (GCIH GCFA) CEH