A leading Managed Security Service Provider (MSSP) is seeking several Senior / L3 SOC Engineers to join their growing security team on a permanent basis. This business specializing in delivering top-tier Microsoft focused cybersecurity solutions to a diverse range of clientele alongside other services across the Microsoft portfolio (M365, Azure etc.) They pride themselves on staying ahead of evolving threats and providing comprehensive security measures to safeguard their clients’ digital assets.
The ideal candidate will play a pivotal role in their Security Operations Center (SOC), contributing expertise in managing and responding to security incidents while demonstrating a strong understanding of Azure Sentinel and Microsoft Defender.
Key Responsibilities:
Monitor security events and alerts using Azure Sentinel and Microsoft Defender, ensuring timely and effective response to potential threats.
Mentor L1/L2 SOC Analysts whilst acting as their technical escalation point.
Analyze and investigate security incidents, providing detailed reports and recommendations for mitigation.
Implement and manage security controls, configurations, and policies within Azure Sentinel and Microsoft Defender.
Collaborate with cross-functional teams to develop and enhance security strategies, including threat hunting and incident response procedures.
Stay updated with emerging security threats, vulnerabilities, and industry best practices to proactively address potential risks.
Requirements:
Proven experience as a Security/SOC Engineer or similar role within an MSP, MSSP or cybersecurity environment.
In-depth knowledge and hands-on experience with Azure Sentinel and Microsoft Defender.
Significant Kusto Query Language (KQL) experience.
Strong understanding of cybersecurity principles, tools, and technologies.
Excellent analytical and problem-solving skills with the ability to make quick, informed decisions under pressure.
Relevant certifications such as GIAC, or Microsoft certifications would be advantageous.
Any experience with SOC Prime, Carbon Black, and SOAR would be advantageous.
Remote based.
Paying up to 75k, depending on experience.
As this is a 24×7 SOC you will be required to be a part of a shift pattern. (4 on, 4 off)
