Security Operations Center Engineer

Job Description: SOC Engineer 

Support work 2- 3hrs Mon to Fri (Remotely) UK Time Zone 

Job Description:

• Strong proficiency in Python for scripting, automation, and tooling.

• Deep understanding of Linux environments (administration, security hardening, logging).

• Solid background in cybersecurity, including threat detection, incident response, and threat intelligence.

• Experience working in or supporting a Security Operations Centre (SOC).

• Familiarity with SIEM platforms, log analysis, and rule creation.

• Good understanding of security frameworks (MITRE ATT&CK, NIST, ISO 27001).

• Actively monitor, investigate, and respond to security alerts and incidents.

• Develop and maintain automation scripts using Python for threat detection and response.

• Administer and harden Linux-based systems in a security operations context.

• Analyse and enhance detection rules and use cases across SIEM platforms.

• Support threat hunting and security monitoring across a complex enterprise environment.

• Contribute to continuous improvement of incident response playbooks and detection capabilities.

• Collaborate with other teams (IT, DevOps, Risk, and Compliance) to drive secure practices.

• Experience with cloud platforms (AWS, Azure, GCP).

• Knowledge of infrastructure-as-code or DevSecOps environments.

• • Industry certifications such as GCIA, GCIH, OSCP, or equivalent.