SOC Engineer

Responsibilities

• SIEM Engineering & Management: Design, develop, and maintain SIEM dashboards, alerts, and reports. Handle data onboarding, CIM mapping, and optimization of the SIEM environment to ensure accurate detection.
• ICT Project Collaboration: Act as the security subject matter expert (SME) in ICT project, ensuring “security by design” is integrated into every project milestone.
• Incident Response: Monitor security events, investigate suspicious activity, and participate in the technical response to security incidents, ensuring thorough documentation and post-incident reviews.
• SOAR & Automation Orchestration: Develop and maintain automated playbooks (e.g., SOAR) to streamline repetitive tasks, reducing Mean Time to Respond (MTTR) and improving operational efficiency.
• Detection Engineering: Continuously tune SIEM correlation rules and logic to reduce false positives and improve visibility into the MITRE ATT&CK framework.
• Proactive Threat Hunting: Conduct regular, intel-driven threat hunting exercises within the SIEM environment to uncover stealthy indicators of compromise (IoCs) that standard alerting might miss.
• Customer Engagement & SOCaaS Evolution: Partner directly with customers to understand their unique security needs and participate in our SOCaaS offering by scaling service capabilities, improving multi-tenant architectures, and enhancing the overall value of the managed service.

Qualifications