Security Operations Center Engineer

Role Overview

We are searching for a Security Operations Center (SOC) Engineer to spearhead incident response initiatives, guide junior security analysts, and enhance our security surveillance systems.

Key Responsibilities

• Lead and manage incident response activities during security events.
• Mentor and support development of junior SOC team members.
• Strengthen monitoring capabilities for timely threat detection.

Required Qualifications

• Minimum of 4 years' experience within a SOC or security operations setting.
• In-depth expertise in networking concepts, endpoint protections, and operating systems internals for both Windows and Linux.
• Hands-on proficiency with prominent SIEM tools such as Splunk, QRadar, or Sentinel, and endpoint detection and response platforms like CrowdStrike, Defender, or SentinelOne.
• Strong comprehension of the MITRE ATT&CK framework alongside threat modeling methodologies.
• Practical experience scripting automation with Python or PowerShell aimed at detection and remediation processes.
• Proven ability in incident response, including effective containment and mitigation.
• Clear, articulate communication skills suitable for presenting security reports to both technical experts and non-technical audiences.
• Capability to maintain performance and composure under pressure during active security incidents.

Preferred Credentials and Skills

• Certifications such as GCIH, GCIA, CySA+, or OSCP are advantageous.
• Experience monitoring security in cloud environments including AWS, Azure, and Google Cloud Platform.
• Knowledge of threat intelligence systems and indicators of compromise (IOC) management.
• Experience leading or mentoring small security teams.