Level 3 SOC Engineer

Our UK based client is seeking a L3 SOC Engineer to join their team in a remote capacity. The successful incumbent can be based anywhere in South Africa. Your main responsibility is to provide level 3 escalations capabilities to the SOC, be a subject matter expert for security-related services and perform day to day SOC threat hunting and investigation activities. 

Required Qualifications

• Cybersecurity related certifications.
• Microsoft Security stack certifications.
• CISM/CISSP preferred.
• Other technical security and vendor qualifications a bonus
• CYSA, CASP

Experience and Qualifications:

• SOC operations and tools (SIEM, EDR, etc.)
• Vulnerability management experience
• MSP/MSSP experience
• Microsoft security stack (Intune, Azure, ATP, Defender)
• 3+ years in a SOC environment
• Threat intelligence

Experience in the following is desirable

• Microsoft Azure Sentinel
• Scripting (PowerShell, Python, regex)
• Other security tools a bonus
• Control frameworks (ISO, PCI DSS, CIS, and/or NIST)
• Working with remote team
• 5+ years in a cybersecurity environment
• End Point Protection, Cloud Security, Security Incident and Event Management, Managed Anti-Virus Services, CASB, Data Loss Prevention
• Threat and security research and investigation
• Ability to provide information and audits and reporting for supported technologies.
• Present on risk findings and vulnerabilities in a client environment
• Conduct and develop security controls and put in measures to mitigate and prevent threats, vulnerabilities to prevent attacks on client environments
• Ability to create root cause analysis and reporting on events
• Facilitates the analysis of a client threat landscape during cyber-attacks activity.

Please apply directly online if you meet the requirements. Kindly note if you do not hear back from a consultant within 5 to 10 days of your application, please consider yourself unsuccessful this time around. Please also be advised that our consultants receive hundreds of applications daily - it is impossible to reply to everyone - thus only suitable candidates will be contacted for the role. We appreciate your understanding