Provide hands-on technical guidance and mentoring to SOC Security Analysts
Actively monitor, analyse, and investigate security events using SIEM and associated tools
Participate in end-to-end incident response activities, providing SME support where required
Support adherence to SLAs through timely detection, analysis, and response to incidents
Conduct targeted threat hunting to identify hidden threats and potential vulnerabilities
Support the tuning and maintenance of SIEM alerts, correlation rules, and dashboards
Assist with incident escalation and handover to Digital Forensics and Incident Response (DFIR) teams
Contribute to the development and refinement of SOC procedures and playbooks
Identify and suggest opportunities for operational improvement and automation
Maintain awareness of emerging threats and attack techniques and share insights with the SOC team
Assist with the preparation of incident and post-incident customer reports

Minimum 5 years’ experience in cybersecurity, including at least 2 years within a SOC environment
Strong hands-on experience with SIEM, SOAR, and EDR technologies
Proven experience supporting or leading security incident response activities
Solid understanding of SOC operations, incident response, and threat intelligence workflows
Experience providing technical guidance or mentoring to junior analysts
Strong analytical and investigative skills, with the ability to work under pressure
Excellent written and verbal communication skills, including incident reporting
High attention to detail and a structured approach to security operations
Experience with Microsoft and/or Google security tooling (desirable)
Professional certifications such as GCIH, GSOC, CySA+, CISSP (advantageous)

SOC Security Engineer

Key skills