Security Operations Center Engineer, Ekco

• Have a minimum of 4+ years experience working in a SOC environment
• Experience with Microsoft Sentinel
• Experienced with deployments
• Practical experience in managing and working with hardware infrastructure
• Working knowledge in the following areas:
• Network configuration management
• Unix, Linux, Windows, etc. operating systems
• System Administration (On-prem & Cloud)
• Virtualization technologies
• Packet analysis tools (tcpdump, Wireshark, ngrep, etc.)
• Adhere to security configuration best practices in all aspects of daily duties
• Keen problem solving / troubleshooting skills
• Strong analytical skills and a logical approach to resolving issues
• A can-do attitude
• Excellent written and verbal communication skills. You should be able to communicate technical details clearly at all levels
• The ability to adjust and adapt to changing priorities in a dynamic environment
• A pro-active approach to addressing issues and requests and the ability to multitask
• The ability to learn new technologies and concepts quickly
• Great organisational skills and attention to detail
• Adaptability to do a range of work, including the complex, non-routine, mundane and multi-environment
• Able to work under direction, use discretion and determine when to escalate issues
• Effective communication, teamwork and task-time management skills

Desirable

• As a SOC Engineer your primary objective is to configure, implement, and maintain the critical infrastructure that supports Security Operations Center (SOC) functions
• Your role ensures the seamless operation, scalability, and security of the SOC’s underlying systems, enabling the team to deliver effective cybersecurity services to clients
• Reporting to the regional Head of SOC, the role of SOC Engineer will play a crucial role in deploying, maintaining and monitoring customer SOC tools and underlying infrastructure
• Configure, maintain, and optimize SOC-related infrastructure, including servers, virtual environments, and cloud platforms
• Install, manage, and troubleshoot security tools such as SIEMs, EDR, and log management systems
• Assist in provisioning and configuring tools and systems for new clients, ensuring smooth integrations into SOC workflows
• Monitor SOC infrastructure performance, ensuring high availability and minimal downtime
• Maintain detailed records of infrastructure configurations, updates, and changes to support auditing and troubleshooting
• Develop and implement scripts or workflows to automate routine tasks and improve operational efficiency
• Manage user accounts, roles, and permissions across SOC systems to maintain security and compliance
• Collaborate with SOC analysts and engineers during incident investigations to ensure infrastructure supports effective responses
• Monitor ticket queues, ensuring adherence to KPIs (E.g. Mean Time to Respond, Mean time to Escalate and Mean Time to Close etc.)
• Review and respond to inbound queries & requests from customers in the SOC ticketing system
• Attend Client and escalation calls where required
• Evaluate and recommend enhancements or new security technologies/tools to improve SOC capabilities
• Identify and implement parsing configuration as required to optimise log source configuration, aiding investigation efforts
• Acting as subject matter expert, investigating security events forwarded from clients
• Act as a key contributor to SOC continuous improvement criteria as required, identifying gaps in existing processes, proposing and documenting working solutions to close gaps
• Develop, document, and deliver training material for the SOC Engineering team, providing granular instructions for SOC processes and processes
• Create custom, ad hoc and monthly reporting solutions for SOC customers as required
• Performing other duties as assigned by SOC Leadership