SOC Analyst / Junior Engineer

The SOC Analyst/Engineer is responsible for designing, implementing, and maintaining security monitoring tools, processes, and integrations that support the Security Operations Center (SOC). This role ensures that security technologies—such as SIEM, EDR, vulnerability management, and log collection platforms—operate reliably and efficiently to detect and respond to threats. Working closely with SOC Analysts, Incident Responders, and platform owners, the SOC Analyst/Engineer develops detection use cases, automates workflows, fine-tunes alerting logic, and ensures log ingestion quality across all customer environments. The engineer also supports onboarding new clients, integrates data sources, and maintains documentation and runbooks.

This role is critical for supporting a high-availability 24/7 SOC environment within an MSSP, ensuring strong platform performance, continuous improvement, and alignment to industry best practices.

Working closely with SOC Analysts, Incident Responders, and platform owners, the SOC Engineer develops detection use cases, automates workflows, fine-tunes alerting logic, and ensures log ingestion quality across all customer environments. The engineer also supports onboarding new clients, integrates data sources, and maintains documentation and runbooks.

This role is critical for supporting a high-availability 24/7 SOC environment within, ensuring strong platform performance, continuous improvement, and alignment to industry best practices.

Qualifications

**Required Skills and Experience:**

– Proficiency with SIEM platforms (such as Splunk, ELK Stack, or ArcSight)

– Strong understanding of network and system fundamentals

– Demonstrated ability to analyze logs and interpret security data

– Knowledge of incident response procedures and best practices

– Ability to identify and classify security threats and anomalies

– Strong attention to detail and organizational skills

– Excellent problem-solving and analytical abilities

– Clear written and verbal communication skills

– Ability to work effectively in a team environment

**Preferred Skills and Experience:**

– Security certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC certifications

– Experience with ticketing and case management systems

– Basic scripting knowledge in Python or Bash

– Familiarity with malware analysis concepts

– Understanding of cloud security principles and threats

– Experience with threat intelligence platforms

– Knowledge of common attack vectors and tactics