Security (SOC) Engineer

We seek candidates who possess practical experience working within a Security Operations Centre (SOC) or a cyber security-focused role, ideally with 1-2 years of experience as an engineer. You should have knowledge of various security tools and technologies including SIEM, IDS/IPS, EDR/XDR, Email protection, DLP, SOAR, and Cloud Security. Familiarity with Cyber Security domains such as Identity and Access Management, Network Security, and Incident Response is essential. It would be advantageous if you have an Infrastructure engineering background and relevant industry qualifications and certifications such as CompTIA Security, CEH, GCIH, GCIA, or CISSP. Experience with Microsoft O365 Security solutions and network security operations is also preferred. Furthermore, knowledge of security best practices and regulatory compliance frameworks, like NIST, ISO27001, and PCI-DSS, is desirable. We are particularly interested in candidates proficient with specific security products, including SEIM (e.g., Rapid7 IDR, MS Sentinel, SPLUNK), SOAR (e.g., Rapid7 ICON, MS Sentinel), Endpoint Detection and Response (e.g., Microsoft Defender), Email Security (e.g., Proofpoint, Mimecast), and Vulnerability Management (e.g., Rapid7 IVM, Nessus, Tenable). Proficiency with scripting and automation (e.g., Powershell, Python) and an understanding of Zero-Trust Architecture within a hybrid cloud environment are also important. Additionally, we seek individuals with a working knowledge of cyber threat actors, TTPs (Tactics, Techniques, and Procedures), IOCs (Indicators of Compromise), security auditing, and security incident response processes.