SOC Engineer

Responsibilities:

• Develop and fine-tune use cases (analytic rules) for SOC operations.
• Manage content to ensure the SOC's operational effectiveness.
• Coordinate platform support and ensure seamless integration with SOC activities.
• Develop and manage automation activities (playbook, notebook)) within the SOC.
• Develop analytics and dashboards (workbook) for effective SOC monitoring.
• Manager 3rd parties for SOC built and delivery
• Develop and manage AI/ML technologies to enhance SOC operations.

To be successful in this role, you should have experience in most of the following:

• 5 years’ experience in similar environments
• Hands-on experience in designing, implementing, and managing SOC infrastructure and automation workflows with Microsoft Sentinel and Logic Apps.
• Strong understanding of automation processes within a SOC environment.
• Experience in developing and managing AI/ML technologies in support of SOC operations.
• Proficiency in managing analytics and dashboard tools for SOC monitoring. Familiarity with SOC processes.
• Hands-on experience in setting up and writing SIEM correlation rules.
• Hands-on experience in Unix/Linux/Windows administration, virtual machines, storage & backup systems, network & security management.
• Strong knowledge of security threats and attack countermeasures.
• Analytical problem-solving and troubleshooting skills.
• Excellent communication skills.
• Experience in vendor management.