Continent8
Senior SOC Engineer
Continent8, New London, Indiana, United States,
Senior SOC Engineer
As part of our continued cybersecurity expertise expansion, we are on the lookout for a Senior SOC Engineer, based in London, UK to join our Security Operations team.
This role will join, support, and help drive the current SOC team, based in Europe, Asia and Canada, all under the direction of the Chief Security Officer.
The successful individual will take a key role in the development of our security capabilities including internal procedures, developments of our security toolsets used in capturing, analyzing, and responding to security threats and the continued growth and development of our SOC team. The primary objective will be to reduce operating risk for customers and improve our responses to security threats.
The Role:
As a Senior SOC Engineer, you will be responsible for:
Leading monthly reviews with customers to describe and document trends and articulate the efficacy of the security services.
Driving the SOC team, from a technical and mentoring point of view, to ensure appropriate training and knowledge is in place.
Leading meetings and working groups to address issues related to malware, threats, vulnerabilities, and cybersecurity preparedness.
Managing detailed incident response activities, leading critical security incident investigations, and working with asset owners, stakeholders, other teams, and relevant senior leadership to develop remediation plans.
Investigate, document, and report on external information security threats and emerging trends.
Oversight of vulnerability and risk analysis for customer IT systems, enterprise applications and cloud infrastructure.
Building automated alerting and remediation workflows for security issues.
Development of operating procedures for teams to integrate into their daily workflows to deliver secure enterprise applications and & infrastructure at scale.
Consult on technical design & engineering processes for system architectures to ensure that security is a design consideration and not a feature.
Recommending information assurance and security solutions to support product development and customer requirements.
Driving the ongoing improvement of all security processes and procedures.
Knowledge, Skills, Qualifications & Experience Required:
5+ years in a Security Operations role with comprehensive experience in investigations and incident response.
Experience working within a Security Operations Centre as a senior SOC engineer / analyst.
Expert knowledge in using and configuring Elastic stack (Elastic Search, Logstash, Kibana), or equivalent SOC stack technology, to drive SOC operations.
One or more of the following certifications are highly desired: CompTIA Security+, PentTest+, EC-Council (CEH, ECIH, CHFI, CND), Cisco CyberOps, GIAC (GCED, GCIA, GCIH), ISC2 (CISSP, CSSP) or similar security certifications.
Detailed understanding of threats, vulnerabilities, exploits, defences, security principles and policies.
Knowledge of techniques attackers use to identify vulnerabilities, gain unauthorised access, escalate privileges and access restricted information.
In-depth experience analysing event and system logs, performing packet and forensic analysis in support of intrusion analysis or enterprise-level information security operations.
In depth knowledge of security practices and essential security technologies (AV, EDR, FIM, HIPS, NIPS, SIEM, WAF/DAM, DLP, IDS/IPS).
Knowledge of information security protection/detection and authentication systems (firewalls, IDS, IPS, anti-virus, AD, AAD, RADIUS etc.).
In-depth knowledge of Unix, Linux and Windows administration, patch deployment and system configuration and security controls.
Detailed knowledge of communication protocols (HTTP, DNS, TCP/UDP) as well as the various techniques utilised by malware within an operating system for persistence and data collection.
Practical experience with scripting languages (e.g., Python, Perl, Bash, PowerShell).
Understanding of database systems, application system development and installation/implementation processes.
Practical experience performing vulnerability scans, risk assessments and security assessments.
Practical experience in the use of Tenable vulnerability assessment tool is highly desirable.
Understanding of virtualization technologies (e.g. VMware) and cloud environments (e.g. Azure, AWS)
Strong foundation in security domains such as web security, cloud services security, identity/access management, web application firewalls, intrusion detection, and static/dynamic application security testing.
Experience in designing, implementing, and managing solutions to complex security and infrastructure environments.
Attributes
Leadership experience in driving, mentoring and training junior members of a team.
Able to effectively communicate complex technical concepts such as security vulnerabilities to application developers and/or senior managers who may have little to no experience with security.
Must be able to work independently at a large scale, enterprise setting and collaborate with multiple team members.
Detail-oriented and well-organized.
Proactive and able to multitask effectively.
Approachable with strong interpersonal skills.
Adaptable and willing to learn in a rapidly changing environment.
Our Company
Continent 8 has powered a second digital revolution – a revolution defined by intense, instantaneous, and omnipresent computing power. We have built and secured the world’s most reliable and secure edge network. Our global footprint spans every inhabited continent, and our edge network is local to over 92% of the world’s population.
We regularly fend off some of the most sophisticated attacks in the world and our security solutions are known to provide unmatched protection. We have developed specialized expertise in regulatory environments. We help protect against cyber and political risk, ensuring that our world class network delivers high availability and throughput.
Our secure edge network is globally distributed and serves the world’s most demanding industries. The gaming and financial trading industries depend on us to process billions of dollars’ worth of transactions each day. The transportation and autonomous vehicle industries depend on us to move the world’s population. The energy and utility industries depend on us to power critical infrastructure. Organizations choose Continent 8 when they simply can’t afford to lose connectivity.
We are the Edge Infrastructure-as-a-Service provider of choice for the world’s most demanding customers.
#J-18808-Ljbffr
As part of our continued cybersecurity expertise expansion, we are on the lookout for a Senior SOC Engineer, based in London, UK to join our Security Operations team.
This role will join, support, and help drive the current SOC team, based in Europe, Asia and Canada, all under the direction of the Chief Security Officer.
The successful individual will take a key role in the development of our security capabilities including internal procedures, developments of our security toolsets used in capturing, analyzing, and responding to security threats and the continued growth and development of our SOC team. The primary objective will be to reduce operating risk for customers and improve our responses to security threats.
The Role:
As a Senior SOC Engineer, you will be responsible for:
Leading monthly reviews with customers to describe and document trends and articulate the efficacy of the security services.
Driving the SOC team, from a technical and mentoring point of view, to ensure appropriate training and knowledge is in place.
Leading meetings and working groups to address issues related to malware, threats, vulnerabilities, and cybersecurity preparedness.
Managing detailed incident response activities, leading critical security incident investigations, and working with asset owners, stakeholders, other teams, and relevant senior leadership to develop remediation plans.
Investigate, document, and report on external information security threats and emerging trends.
Oversight of vulnerability and risk analysis for customer IT systems, enterprise applications and cloud infrastructure.
Building automated alerting and remediation workflows for security issues.
Development of operating procedures for teams to integrate into their daily workflows to deliver secure enterprise applications and & infrastructure at scale.
Consult on technical design & engineering processes for system architectures to ensure that security is a design consideration and not a feature.
Recommending information assurance and security solutions to support product development and customer requirements.
Driving the ongoing improvement of all security processes and procedures.
Knowledge, Skills, Qualifications & Experience Required:
5+ years in a Security Operations role with comprehensive experience in investigations and incident response.
Experience working within a Security Operations Centre as a senior SOC engineer / analyst.
Expert knowledge in using and configuring Elastic stack (Elastic Search, Logstash, Kibana), or equivalent SOC stack technology, to drive SOC operations.
One or more of the following certifications are highly desired: CompTIA Security+, PentTest+, EC-Council (CEH, ECIH, CHFI, CND), Cisco CyberOps, GIAC (GCED, GCIA, GCIH), ISC2 (CISSP, CSSP) or similar security certifications.
Detailed understanding of threats, vulnerabilities, exploits, defences, security principles and policies.
Knowledge of techniques attackers use to identify vulnerabilities, gain unauthorised access, escalate privileges and access restricted information.
In-depth experience analysing event and system logs, performing packet and forensic analysis in support of intrusion analysis or enterprise-level information security operations.
In depth knowledge of security practices and essential security technologies (AV, EDR, FIM, HIPS, NIPS, SIEM, WAF/DAM, DLP, IDS/IPS).
Knowledge of information security protection/detection and authentication systems (firewalls, IDS, IPS, anti-virus, AD, AAD, RADIUS etc.).
In-depth knowledge of Unix, Linux and Windows administration, patch deployment and system configuration and security controls.
Detailed knowledge of communication protocols (HTTP, DNS, TCP/UDP) as well as the various techniques utilised by malware within an operating system for persistence and data collection.
Practical experience with scripting languages (e.g., Python, Perl, Bash, PowerShell).
Understanding of database systems, application system development and installation/implementation processes.
Practical experience performing vulnerability scans, risk assessments and security assessments.
Practical experience in the use of Tenable vulnerability assessment tool is highly desirable.
Understanding of virtualization technologies (e.g. VMware) and cloud environments (e.g. Azure, AWS)
Strong foundation in security domains such as web security, cloud services security, identity/access management, web application firewalls, intrusion detection, and static/dynamic application security testing.
Experience in designing, implementing, and managing solutions to complex security and infrastructure environments.
Attributes
Leadership experience in driving, mentoring and training junior members of a team.
Able to effectively communicate complex technical concepts such as security vulnerabilities to application developers and/or senior managers who may have little to no experience with security.
Must be able to work independently at a large scale, enterprise setting and collaborate with multiple team members.
Detail-oriented and well-organized.
Proactive and able to multitask effectively.
Approachable with strong interpersonal skills.
Adaptable and willing to learn in a rapidly changing environment.
Our Company
Continent 8 has powered a second digital revolution – a revolution defined by intense, instantaneous, and omnipresent computing power. We have built and secured the world’s most reliable and secure edge network. Our global footprint spans every inhabited continent, and our edge network is local to over 92% of the world’s population.
We regularly fend off some of the most sophisticated attacks in the world and our security solutions are known to provide unmatched protection. We have developed specialized expertise in regulatory environments. We help protect against cyber and political risk, ensuring that our world class network delivers high availability and throughput.
Our secure edge network is globally distributed and serves the world’s most demanding industries. The gaming and financial trading industries depend on us to process billions of dollars’ worth of transactions each day. The transportation and autonomous vehicle industries depend on us to move the world’s population. The energy and utility industries depend on us to power critical infrastructure. Organizations choose Continent 8 when they simply can’t afford to lose connectivity.
We are the Edge Infrastructure-as-a-Service provider of choice for the world’s most demanding customers.
#J-18808-Ljbffr