Beschreibung

As a SOC Engineer, you will enhance cloud security by leading incident management improvements and defining best practices. This role involves taking ownership of security tools, facilitating knowledge sharing, and acting as the incident commander.

Anforderungen

• •5+ years working experience as SOC/Security Incident Response Engineer
• •Genuine interest and passion for Security as a defender
• •Experience in handling security incidents effectively
• •Expert on SIEM tooling usage, setup, maintenance, and automation
• •Hands-on experience managing cloud-based infrastructure, preferably AWS using CloudFormation, ELK stack, Docker, Kubernetes
• •Hands-on experience in working with MS Defender and CrowdStrike
• •Proficiency with at least one programming language, preferably Python
• •Enjoy working with command-line tools in Unix environments
• •Ideally experience of MITRE ATT&CK Framework or the Cyber Kill Chain
• •Experience leveraging AI, Generative AI (GenAI) to enhance engineering productivity

Aufgaben

• •Lead improvements of Security Incident Management products
• •Act as security incident commander
• •Define best practices for Security Incident Response
• •Increase company-wide adoption of security practices
• •Facilitate knowledge-sharing initiatives within and outside the team
• •Take ownership of Security Incident Management products
• •Participate in the on-call setup for Information Security

Tools & Technologien