The Security Operations Centre (SOC) houses the cybersecurity team responsible for monitoring and analysing an organisation’s security posture on an ongoing basis. The SOC team’s goal is to provide 24x7x365 capabilities to detect, analyse, and respond to cybersecurity incidents using a combination of technology solutions and a strong set of processes.
The SOC staff work closely with our customer and eir evo’s Network Operation Centre (NOC) team to ensure security issues are addressed quickly upon discovery.
The Cyber Security Engineer will support technologies used for security threat monitoring, detection, event analysis, and incident reporting for the cybersecurity team.
This is a contract-based position for a duration of 6 – 12 months.
We are looking for a Cyber Security Engineer to perform the following duties:
Support the day-to-day operation of a highly available distributed multi-clustered multi-tenant SIEM, SOAR, EDR deployment.
Support onboarding and maintenance of a wide variety of data sources, including OS, appliance, and application logs.
Create queries, dashboards, and visualizations to support customer requirements.
Perform troubleshooting and remediation of issues with data ingestion.
Track and resolve security engineering incidents regularly, collaborating with other teams for resolution and suggesting areas for improvement.
Manage the complete lifecycle of event source system administration, including coordination and planning for system upgrades and new systems, as well as maintaining current operational event flows.
Lead and coordinate relationships, projects, and open issues with vendor support.
Design and administer security controls, services, and architecture, including infrastructure, network systems, application security tools, and incident response functions.
Maintain documentation for the environment and develop technical documentation as required.
Configure enterprise security log sources into SIEM, EDR, SOAR, and VA solutions.
Continuously assess current security monitoring and recommend improvements.
Research the latest threats and technological advancements.
Job schedule: Business Hours, Monday-Friday (On Call)
Is this you?
Passionate and professional security mindset.
Strong customer service skills to follow up with clients and handle escalations.
Ability to ensure confidentiality and discretion in sensitive tasks.
Experience in a technical customer support environment adhering to SLAs.
3-4 years of experience in information security or IT.
2-3 years of experience in SIEM deployment.
Strong understanding of SIEM and UEBA.
Proficiency in scripting languages such as Python and PowerShell.
Knowledge of machine learning in cybersecurity.
Understanding of cloud technologies.
Good knowledge of infrastructure, log collection, and aggregation techniques.
Experience with endpoint security and host-based intrusion detection solutions.
Expertise in TCP/IP network traffic and event log analysis.
Bachelor’s Degree or equivalent (preferably).
Fluent in English.
We are committed to creating an inclusive and supportive work environment. If you require any reasonable adjustments during the application or interview process, please let us know, and we will work with you to meet your needs.
#eirforall
EVO5898
Candidates must be eligible to work full-time and long-term in the specified location or currently hold a valid long-term work visa to apply.
eir evo talent, eir evo, and our clients are equal opportunity employers committed to recruiting and appointing the best candidate regardless of marital/civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality, ethnicity, color, sexual orientation, or disability. We adhere to all relevant Data Protection laws when processing your personal data.
If you share your CV or personal information with eir evo talent, eir evo, and our clients, your details will be held in accordance with our privacy policy, which is used by our recruitment team to contact you regarding this or other opportunities.
#J-18808-Ljbffr