Intermediate to Senior SOC Engineer

Intermediate / Senior SOC Engineer (Security Operations Centre Engineer)

Join a team of information security professionals with strong technical expertise and experience in addressing evolving cyber threats. The team focuses on understanding complex security challenges and delivering clear, practical, and actionable solutions to protect organisational data.

KPA'S:

• Design, implement, and optimise enterprise cybersecurity monitoring and incident response capabilities
• Maintain and enhance organisational security posture through detection, automation, and response processes

Security Platform Engineering:

• Implement and manage security monitoring solutions (SIEM, cloud monitoring)
• Integrate log sources and develop dashboards for visibility

SIEM Administration & Optimisation:

• Configure and maintain SIEM platforms (Sentinel, Splunk, QRadar, Log Rhythm, Elastic)
• Develop and tune correlation rules
• Reduce false positives and enhance alert quality
• Create custom alerting mechanisms

Incident Response & Threat Management:

• Investigate complex security incidents
• Lead incident response and coordinate containment, eradication, and recovery
• Perform root-cause analysis

Security Automation:

• Implement and support SOAR platforms
• Automate repetitive SOC tasks
• Develop scripts and workflows for alert enrichment and response

Technical Environment:

• SIEM, EDR/XDR, IDS/IPS, Firewalls, WAF, Threat Intelligence
• Cloud security:
  Azure, AWS, GCP
• Systems:
  Windows Server, Linux, Active Directory, Entra
• Scripting:
  Power Shell, Python, Bash, REST APIs

Minimum Experience:

• Intermediate: 3–5 years cybersecurity experience
• Senior: 5–10+ years experience

Minimum Qualifications &

Certifications:

• Degree in Cybersecurity / IT / related field (or equivalent experience)
• Security+ | CySA+ | SC-200 | AZ-500 | CISSP | GIAC (GCIH, GCFA) | CEH