CyberSecurity Operations Engineer (SOC L2) – Defender, Azure, Google SecOps, CyberArk

About the role

You will join the Security Operations Centre (SOC) as a Level‑2 engineer, investigating cyber threats, responding to incidents and helping to improve the organisation’s security posture. This is a 12‑month renewable contract based onsite at One‑North, working Monday to Friday during regular office hours.

Key responsibilities

• Investigate and triage security alerts across SIEM, EDR/XDR, cloud, identity, email and network platforms.
• Analyse phishing, malware, account compromise and other cyber incidents.
• Conduct threat hunting using threat intelligence and the MITRE ATT&CK framework.
• Identify root cause, scope and business impact of incidents and support containment, remediation and recovery.
• Improve SOC playbooks, detection rules and operational processes.
• Assist with onboarding new security tools and technologies.

Required profile

• Minimum 3 years of experience in a SOC or cyber security operations role.
• Hands‑on experience investigating security incidents.
• Strong understanding of MITRE ATT&CK, threat hunting and incident response.
• Ability to work independently in a fast‑paced environment.
• Eligibility to obtain required security clearance.
• Diploma or degree in Cybersecurity, IT or a related discipline.

Required skills

• SIEM platforms
• EDR/XDR platforms
• Microsoft Defender
• Microsoft Azure Security
• Google SecOps
• CyberArk
• MITRE ATT&CK framework
• Threat hunting
• Incident response