Incident Management Engineer (SOC Specialist)

About the role

We are looking for a technical SOC Specialist to lead incident response and threat detection in our 24/7 Security Operations Center. The role covers the full incident lifecycle, from triage and traffic analysis to host recovery and remediation, and includes designing automated SOAR playbooks.

Key responsibilities

• Provide continuous 24/7 real‑time monitoring of security events and alerts.
• Tri­age, prioritize and manage alerts from SIEM, Anti‑DDoS and other security solutions.
• Lead technical incident response activities, including host containment, recovery and remediation.
• Maintain the full incident response lifecycle and ensure compliance with SLAs.
• Identify automation opportunities and design SOAR playbooks in FortiSOAR.
• Apply MITRE ATT&CK framework to map attacker techniques and conduct threat‑intelligence analysis.
• Assess vulnerabilities and deliver technical recommendations.
• Maintain deep knowledge of Windows, Linux, Wireshark and other security tools.

Required profile

• BSc in Computer Science, Electrical/Computer/Software Engineering or related field.
• 3‑5 years of experience in a Security Operations Center environment.
• Mandatory SIEM‑based training and FortiSOAR training; preferred certifications include GCIH, Incident Handler, Linux+, Security+, CCNA, FortiSOAR.
• Ability to work shifts and provide overtime support when needed.

Required skills

• Windows and Linux operating systems.
• SIEM platforms such as ArcSight, Microsoft Sentinel.
• FortiSOAR and KQL (Kusto Query Language) for query development.
• Anti‑DDoS solutions, IPS, EDR, firewalls and MFA systems.
• Wireshark for deep‑packet analysis.
• MITRE ATT&CK framework and threat‑intelligence platforms.
• Vulnerability assessment and remediation techniques.
• Understanding of common network services (Web, Mail, FTP, DNS) and attack patterns.