About the role
You monitor, investigate and respond to security events across the systems we manage, and help improve how we detect threats.
Key Responsibilities
- Monitor security alerts and logs in the SIEM and related tools
- Triage and investigate suspicious activity and escalate incidents
- Follow and improve incident response playbooks
- Tune detection rules to cut noise and catch real threats
- Write clear incident reports and recommendations
Required Skills
- Understanding of networking, operating systems and common attack techniques
- Interest in or experience with SIEM, EDR or log analysis tools
- A calm, methodical approach to investigating incidents
- Good written communication
Nice to Have
- Security certification such as Security+ or equivalent
- Familiarity with the MITRE ATT&CK framework
Tools and technologies: SIEM and log analysis; EDR tooling; MITRE ATT&CK (nice to have); Incident response playbooks
How to prepare
- Be ready to walk through how you would triage a suspicious login alert
- Revise common attack techniques and log sources
You monitor, investigate and respond to security events across the systems we manage, and help improve how we detect threats.
What you will do
- Monitor security alerts and logs in the SIEM and related tools
- Triage and investigate suspicious activity and escalate incidents
- Follow and improve incident response playbooks
- Tune detection rules to cut noise and catch real threats
- Write clear incident reports and recommendations
What we are looking for
- Understanding of networking, operating systems and common attack techniques
- Interest in or experience with SIEM, EDR or log analysis tools
- A calm, methodical approach to investigating incidents
- Good written communication
Nice to have
- Security certification such as Security+ or equivalent
- Familiarity with the MITRE ATT&CK framework
Tools and technologies
- SIEM and log analysis
- EDR tooling
- MITRE ATT&CK (nice to have)
- Incident response playbooks
How to prepare
- Be ready to walk through how you would triage a suspicious login alert
- Revise common attack techniques and log sources
Apply for this role
Fill in the form and attach your resume. It goes straight to the Soch Tech team by email, and we reply to every application.
Questions?
Want to ask before you apply?
Email us and we will point you in the right direction.