Assistant Cybersecurity Engineer - SOC Analyst (Surveillance & Security Operations)

About the role

This is a 2-year contract position for an Assistant Cybersecurity Engineer within a 24x7 Cybersecurity Operations Centre (SOC). The analyst helps build and run the SOC's integrated platform for advanced cyber threat monitoring, early warning and active defence, and works with internal teams and cross-agency partners to investigate and respond to threats.

Key responsibilities

• Develop and enhance the integrated SOC for threat monitoring, detection, early warning and active defence
• Investigate and respond to cybersecurity threats together with internal teams and partners
• Perform cyber threat monitoring, tune rules, maintain automation infrastructure, carry out threat hunting and improve cyber hygiene
• Streamline procedures, update and improve standard operating procedures (SOPs)
• Develop new rules based on evolving threats and the environment
• Generate periodic management reports and improve efficiency through automation
• Take part in internal, external and international forums, projects and cyber security exercises

Required profile

• Engineering, Computer Science or related background
• Relevant SOC experience
• Ability to work independently or in teams, multi-task and in a fast-paced environment
• Normal office hours, with off-hours standby to respond to incidents
• A medical declaration and/or further assessment may be required during shortlisting

Required skills

• SIEM and EDR/XDR
• Networking, Windows or Linux administration
• Cloud services and infrastructure
• Basic scripting/programming
• Digital investigation knowledge