Cybersecurity Engineer – SOC Operations

About the role

We are looking for a proactive Cybersecurity Engineer to join our Security Operations Center (SOC). You will be the first line of defense, continuously monitoring security tools and responding to alerts to protect our customers and infrastructure.

Key responsibilities

• Monitor SIEM, EDR, IDS/IPS, firewalls and other log sources for suspicious activity.
• Perform initial triage, classify alerts by severity, and escalate validated incidents to L2 SOC analysts.
• Verify log ingestion and forwarding across security platforms and identify gaps.
• Maintain detailed incident records, triage notes and escalation details.
• Document false positives and suggest improvements to playbooks.
• Create and update tickets in the SOC case‑management system.
• Analyze suspicious emails, URLs and attachments as the first point of contact for customer‑reported incidents.
• Review vulnerability scan reports and forward high‑severity findings to security engineers.
• Assist in preparing daily/weekly SOC dashboards, reports and metrics.

Required profile

• Experience working in a SOC or Managed Security Service Provider (MSSP) environment.
• Strong analytical mindset with the ability to assess impact and scope of security events.
• Familiarity with SLA‑driven escalation workflows.
• Attention to detail and ability to maintain accurate documentation.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR) tools
• IDS/IPS technologies
• Firewalls
• Vulnerability management processes
• SOC case‑management systems
• Log ingestion and forwarding mechanisms
• Email and URL threat analysis