SOC Engineer / Detection Engineer

As a SOC Engineer / Detection Engineer, you will be responsible for detecting, investigating, and responding to security incidents across our environment, while continuously improving how we detect and handle threats. You will work hands-on with our SIEM and incident response processes, and act as a key point of contact between the SOC and other engineering/security teams.

 

Depending on your profile, some of your responsibilities can include:

 

  - Incident Response: Lead and support the end-to-end response to security incidents, from detection through containment, eradication, and recovery.

  - Security Investigation: Conduct in-depth investigations into suspicious activity and alerts, correlating data across logs, endpoints, network, and cloud sources to determine root cause and impact.

  - Post-Mortems & RCAs: Drive post-incident reviews and root cause analyses (RCAs), documenting timelines, findings, and actionable follow-ups.

  - SIEM Engineering: Implement, tune, and maintain SIEM use cases, detection rules, correlation logic, and alerting to reduce false positives and close detection gaps.

  - SIEM Support: Provide ongoing support for the SIEM platform, including onboarding new log sources, troub