Security Operations Centre Specialist (SOC)

Company Description

We are SkillOnNet, leading the igaming entertainment by providing our customers with the most entertaining and trustworthy experience possible, while also reinventing the gambling industry. We are home to more than 30 well-known brands, including PlayOJO, DruckGluck, BacanaPlay, Genting, and many more. We are committed to long-term development and sustainability, and we are trying to revolutionise our industry for the benefit of our players, ourselves, and the entertainment industry as a whole.

Job Description

We are seeking a highly skilled and proactive Security Operations Centre Specialist (SOC) to manage and enhance the organisation's security monitoring, detection, and response capabilities. As a successful candidate you will be responsible for the day-to-day operation, administration, and optimization of SIEM and EDR platforms, proactive threat hunting, security event monitoring, incident investigation, and continuous improvement of detection capabilities.

You will possess hands-on experience in configuring and managing security monitoring tools, developing correlation rules and detection use cases, implementing automated response and blocking mechanisms, reviewing security logs, and ensuring security operations align with regulatory and compliance requirements, including ISO 27001 and PCI DSS.

Responsibilities include:

•Monitor SIEM tools for alerts, incidents, and anomalies in real-time.

•Triage, investigate, and respond to security incidents following established playbooks.

•Correlate data across systems to identify potential threats or breaches.

•Create and maintain incident reports and dashboards.

•Create, review and improve incident playbooks.

•Conduct proactive threat hunting based on threat intelligence and hypotheses.

•Analyze endpoint, network, and log data to detect stealthy or advanced threats.

•Develop detection rules and logic for SIEM, EDR, and other monitoring tools.

•Maintain threat intelligence feeds and indicators of compromise (IOCs).

•Perform internal and external penetration tests on networks, applications, and systems.

•Simulate real-world attack scenarios to identify vulnerabilities and misconfigurations.

•Provide detailed technical reports and recommendations for remediation.

•Maintain proficiency with common offensive tools and frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite).

•Monitor, investigate, and respond to security alerts and incidents generated by SIEM, EDR, and other security technologies.

•Administer, manage, and optimize SIEM and EDR platform.

•Perform continuous security event monitoring and analysis.

•Triage, investigate, contain, eradicate, and support recovery activities for security incidents.

•Analyse security events and identify indicators of compromise (IOCs) and suspicious activities.

•Participate in incident response activities, root cause analysis, and post-incident reviews. …

Вакансия взята с карьерной страницы работодателя. Откликайтесь кнопкой на этой странице: она откроет форму работодателя. CyprusJobs.eu не получает отклики на эту вакансию.