- Design, deploy and support SIEM solutions to meet customer security requirements.
- Work with customers and internal stakeholders to gather requirements and support onboarding activities.
- Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability.
- Support the development and deployment of SOAR playbooks to streamline incident response processes.
- Maintain the availability and performance of SOC infrastructure, including servers, networks and security appliances.
- Configure and optimise log ingestion pipelines and security tool integrations.
- Manage SOC ticket queues and ensure service-level agreements are achieved.
- Ensure incidents are accurately logged, tracked and documented.
- Support the ongoing development and improvement of managed security services.
- Collaborate with analysts, engineers and service teams to improve operational effectiveness.
AWSPythonBash+2 more