Senior Cyber Security Engineer

Senior Cyber Security Engineer

Position within DBT’s SOC (Security Operations Centre), reporting to the Lead Cyber Security Engineer. This role focuses on shaping and evolving the Microsoft Sentinel capability, onboarding complex log sources across multiple cloud platforms, and driving standardisation and enrichment of security logs to improve SOC effectiveness.

• Supporting the Lead Cyber Security Engineer in implementing the monitoring and improvement roadmap.
• Working with SOC Engineering and IDR leads to agree priorities and technical steps to deliver improvements.
• Testing and implementing changes within multiple cloud environments.
• Producing documentation that accurately represents the system and its current state for other engineers to use.
• Updating and maintaining existing tools and infrastructure.
• Proactively reviewing and identifying opportunities to enrich security logs ingested into the SIEM to improve SOC efficiencies.
• Maintaining pipelines and infrastructure that facilitate ingestion and processing of logs.
• Assisting with active investigations and providing expert knowledge to support analysts.
• Creating playbooks and documentation for the maintenance of playbooks.

A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer.