Senior SOC Engineer

About the Company

Responsibilities

• ● Implement and manage the security tools that are currently used as required.
• ● Involve in proof of concept for any new security products that will be used in the future.
• ● Write, review, and enhance the cybersecurity standard operating procedure and playbook as required.
• ● Investigate the alerts from different security technologies, such as security information and event management, extended detection and response, anti-malware, and email security, end-to-end, perform root cause analysis, and mitigate security threats.
• ● Analyse the emerging threat and provide actionable threat intelligence.
• ● Perform threat hunting periodically based on the latest threat intelligence.
• ● Create and review use cases based on the latest threat intelligence.
• ● Implement and perform breach and attack simulation within the environment to identify and close the possible gaps between the latest threat and the current capabilities of security tools.
• ● Implement and manage honeypots to identify and analyse the potential threat that may be targeting the environment.

Requirements

• ● Be passionate about cybersecurity and interested in different aspects of technical expertise in cybersecurity, which includes penetration testing, digital forensic and incident response, threat intelligence, threat hunting, active directory assessment, configuration assessment, and compromise assessment.
• ● Be willing to solve challenges in a practical and hands-on manner.
• ● Have hands-on experience in different types of operating systems, mainly Windows 10 and 11, Windows Server 2022 and 2025, Rocky Linux, Amazon Linux, Debian, and their derivatives, with experience in macOS being a plus.
• ● Understand how different technologies work, such as active directory, databases, endpoint detection and response, extended detection and response, anti-malware, firewall, web application firewall, intrusion detection system, and intrusion prevention system, and virtual private network.
• ● Keep up to date with the latest technologies, threats, and vulnerabilities.
• ● Understand different types of logs and be able to analyse and correlate them based on different types of logs.
• ● Have 7 or more years of experience in security operations, detection engineering, incident response, threat hunting, blue team operations, or security monitoring platform development.
• ● Have expert-level security operations centre detection capability, with the ability to design detection programs across attack paths, log sources, detection logic, false positive reduction, and response workflows.