Security Engineer / SOC Lead

About the role

The Security Engineer / SOC Lead will serve as the onsite operational security focal point, coordinating monitoring, incident response, remediation and reporting with a shared SOC. The role ensures that security events are handled according to approved procedures while maintaining clear ownership and handoffs.

Key responsibilities

• Coordinate security monitoring, alert triage and escalation with the shared SOC and technical teams.
• Lead operational response to confirmed security incidents, collect and preserve evidence, and maintain incident records.
• Drive containment, remediation, recovery and post‑incident reviews with stakeholders.
• Support SIEM integration, use‑case tuning and monitoring coverage assessments.
• Track technical security risks and remediation dependencies across infrastructure, network, cloud and applications.

Required profile

• Minimum 5 years of experience in cybersecurity operations, SOC or incident‑response.
• Practical experience with SIEM platforms such as Splunk or QRadar.
• Strong knowledge of security monitoring, incident handling, network/endpoint telemetry and threat analysis.
• Preferred certifications: Security+, CEH, GCIA.
• Excellent written reporting and stakeholder coordination skills.

Required skills

• SIEM platforms (Splunk, QRadar or equivalents)
• Security monitoring and alert triage
• Incident response and evidence handling
• Network and endpoint telemetry analysis
• Threat analysis and use‑case tuning