SOC Engineer

We are continuously growing and we are looking for a Senior SOC Engineer to join our UniQue Security & Compliance Services team, part of our Professional Services Department.

What will you be bringing to the team?

This is a key technical role responsible for supporting the design, implementation, integration, operation, and ongoing evolution of the company’s Security Operations Center.

We are looking for a hands-on cybersecurity professional with solid experience in SOC engineering, security-platform administration, detection engineering, security integrations, automation, and technical support for incident investigations.

The ideal candidate will contribute to the initial build of the SOC and will retain long-term technical ownership for the health, reliability, configuration, tuning, and continuous improvement of the underlying security technologies.

The role will work closely with SOC Analysts, the SOC Analyst Supervisor, Incident Response, Threat Intelligence, infrastructure, network, cloud, and application teams to ensure that relevant systems are correctly integrated, monitored, and supported.

For the Senior SOC Engineer position we expect you to:

• Support the technical architecture, design, implementation, and operational setup of the Security Operations Center.
• Deploy, configure, integrate, administer, maintain, upgrade, and troubleshoot SOC and cybersecurity technologies.
• Engineer and support SIEM, SOAR, EDR/XDR, NDR, vulnerability-management, threat-intelligence, email-security, and network-security platforms.
• Integrate endpoint, identity, infrastructure, network, cloud, SaaS, application, and business-system data sources using APIs, syslog, agents, collectors, and cloud-native connectors.
• Design and maintain log-source onboarding standards, parsing, normalization, enrichment, retention, health monitoring, and data-quality controls.
• Develop, implement, test, document, and optimise detection rules, correlation logic, analytics, dashboards, reports, watchlists, and monitoring use cases.
• Map detection content to MITRE ATT&CK and validate coverage against relevant attack techniques and business risks.
• Perform technical tuning to reduce false positives, duplicate alerts, and unnecessary noise while preserving or improving detection coverage.
• Work with the SOC Analyst Supervisor and analyst team to translate operational feedback, incident findings, and investigation pain points into engineering improvements.
• Develop and maintain SOAR playbooks, API integrations, scripts, and automated workflows for enrichment, triage, containment, notification, and case management.