Lead SOC Engineer – SIEM Specialist

About the role

The SOC Lead Engineer, SIEM, plays a pivotal technical leadership role within CPX's Security Operations Center. Reporting to the Senior SOC Engineering & Architecture Manager, the engineer will guide both senior and junior staff while supporting pre‑sales activities and SIEM license estimations.

Key responsibilities

• Lead technical operations and management of SIEM platforms such as Splunk, Microsoft Sentinel, LogRhythm, QRadar and FortiSIEM.
• Maintain the log‑collection layer, focusing on tools like CRIBL, to ensure reliable data ingestion.
• Monitor health, perform regular maintenance, and optimise telemetry for accurate correlation and reporting.
• Forecast, track, and coordinate SIEM license usage, renewals and pre‑sales estimations.
• Develop and enforce logging standards across customers, systems and platforms.
• Mentor SOC engineers, resolve complex SIEM issues and drive continuous process improvements.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• Minimum 10 years of experience in SIEM and SOC operations, with proven leadership responsibilities.
• Relevant certifications such as CISSP, CISM, Splunk Certified Architect and cloud architecture certifications (AWS, Azure, Google Cloud).
• Strong understanding of SOC processes, cybersecurity best practices and license management.

Required skills

• Hands‑on expertise with Splunk, Microsoft Sentinel, LogRhythm, FortiSIEM, QRadar and CRIBL.
• SIEM architecture design, log collection and telemetry optimisation.
• Cloud platforms: AWS, Microsoft Azure, Google Cloud.
• Networking knowledge: CCNA, CCNP.