SOC Engineer

Job Description

The SOC Engineer will be responsible for real-time monitoring, triage, and response to cybersecurity incidents across client environments. This role involves correlating alerts, identifying patterns of compromise, and coordinating with response teams to neutralize active threats.

‍

Key Duties

• Monitor SIEM alerts and perform log correlation analysis.
• Conduct triage and initial response for security incidents.
• Investigate suspicious activity across networks and endpoints.
• Refine detection logic and optimize alert accuracy.
• Collaborate with threat hunters and IR teams for advanced cases.

‍

Qualifications

• Hands-on experience with SIEM tools like Splunk, QRadar, or Sentinel.
• Knowledge of EDR platforms, intrusion detection, and forensic investigation.
• Familiarity with MITRE ATT&CK and common adversary techniques.
• Strong scripting or automation skills (Python, PowerShell).
• Excellent problem-solving and communication skills.

‍

Benefits

Comprehensive health and dental insurance, paid family leave, flexible hybrid work, professional development funding, certification support, generous vacation policy, and opportunities for global travel and collaboration.