SOC/NOC Engineer

Job Description:

We are looking for a skilled SOC/NOC Engineer with 2-4 years of experience to join our team. The ideal candidate will have a solid understanding of SOC or NOC monitoring and operations, with expertise in SIEM and security solutions. You will be responsible for maintaining and optimizing our security operations center (SOC) or network operations center (NOC), ensuring robust monitoring, analysis, and response to security events.

Key Responsibilities:

• SIEM Administration: Oversee the deployment, configuration, management, and maintenance of SIEM environments, including user management, license administration, upgrades, patch deployments, log source management, and backup/recovery operations.
• SIEM Content Development: Create and manage SIEM content, including filters, active lists, correlation rules, reports, and queries to generate actionable insights and alerts.
• Threat Intelligence Integration: Incorporate customized threat intelligence feeds into the SIEM system and update threat intelligence from various sources.
• Performance Tuning: Modify and tune SIEM content to meet performance criteria, enhance functionality, and address usability improvements.
• Incident Management: Coordinate with clients for incident analysis, containment, and remediation; create situational awareness briefings; and perform root cause analysis.
• Content Improvement: Identify opportunities for sensor and content improvements to prevent incidents and enhance monitoring capabilities.
• Technical Documentation: Maintain and produce detailed documentation related to security operations, content development, and incident handling.
• Collaboration and Communication: Liaise with security monitoring teams to refine processes, represent as a technical SME in CSIRT meetings, and mentor L1 and L2 team members to foster a culture of skill development and information exchange.

Required Qualifications:

• 2-4 years of experience in SOC or NOC operations with a strong focus on security analytics and monitoring.
• Hands-on experience with SIEM solutions such as ManageEngine Log360, Splunk ES, or IBM Guardium, including architecture design and certification.
• Proficiency in analyzing critical system logs and network protocols, including network flow data and full packet capture technologies.
• Strong problem-solving skills with the ability to perform root cause analysis and preventative investigations.
• Excellent written and verbal communication skills, with a high sense of urgency, integrity, and adaptability.
• Knowledge of networking protocols, network security, and end-point security solutions.
• Experience with DLP, IRM, vulnerability assessment, and patch management solutions.
• Ability to understand and apply risk and vulnerability mitigation strategies.