Social network you want to login/join with:
Founded in 2016, Ekco is now one of the fastest growing cloud solution providers in Europe!
We specialise in enabling companies to progress along the path of cloud maturity, managing transformation and driving better outcomes from our clients’ existing technology investments.
In a few words, we take businesses to the cloud and back!
We have over 1000 highly talented and supportive colleagues (and counting) across a number of regional offices in the UK, Benelux & Ireland.
The Role
As a SOC Engineer, your primary objective is to configure, implement, and maintain the critical infrastructure that supports Security Operations Center (SOC) functions. Your role ensures the seamless operation, scalability, and security of the SOC’s underlying systems, enabling the team to deliver effective cybersecurity services to clients.
Reporting to the regional Head of SOC, the role of SOC Engineer will play a crucial role in deploying, maintaining, and monitoring customer SOC tools and underlying infrastructure.
Day to day your role will involve:
* Configure, maintain, and optimize SOC-related infrastructure, including servers, virtual environments, and cloud platforms.
* Install, manage, and troubleshoot security tools such as SIEMs, EDR, and log management systems.
* Assist in provisioning and configuring tools and systems for new clients, ensuring smooth integrations into SOC workflows.
* Monitor SOC infrastructure performance, ensuring high availability and minimal downtime.
* Maintain detailed records of infrastructure configurations, updates, and changes to support auditing and troubleshooting.
* Develop and implement scripts or workflows to automate routine tasks and improve operational efficiency.
* Manage user accounts, roles, and permissions across SOC systems to maintain security and compliance.
* Collaborate with SOC analysts and engineers during incident investigations to ensure infrastructure supports effective responses.
* Monitor ticket queues, ensuring adherence to KPIs (e.g., Mean Time to Respond, Mean Time to Escalate, and Mean Time to Close).
* Review and respond to inbound queries & requests from customers in the SOC ticketing system.
* Attend client and escalation calls where required.
* Evaluate and recommend enhancements or new security technologies/tools to improve SOC capabilities.
* Identify and implement parsing configuration as required to optimise log source configuration, aiding investigation efforts.
* Act as subject matter expert, investigating security events forwarded from clients.
* Act as a key contributor to SOC continuous improvement criteria, identifying gaps in existing processes, proposing and documenting working solutions to close gaps.
* Develop, document, and deliver training material for the SOC Engineering team, providing granular instructions for SOC processes.
* Create custom, ad hoc, and monthly reporting solutions for SOC customers as required.
* Perform other duties as assigned by SOC Leadership.
About You
* Have a minimum of 3+ years of experience working in a SOC environment.
* Practical experience in managing and working with hardware infrastructure.
* Working knowledge in the following areas:
* Network configuration management.
* Virtualization technologies.
* Packet analysis tools (tcpdump, Wireshark, ngrep, etc.).
* Adhere to security configuration best practices in all aspects of daily duties.
* Keen problem-solving/troubleshooting skills.
* Strong analytical skills and a logical approach to resolving issues.
* Excellent written and verbal communication skills. You should be able to communicate technical details clearly at all levels.
* The ability to adjust and adapt to changing priorities in a dynamic environment.
* A pro-active approach to addressing issues and requests and the ability to multitask.
* The ability to learn new technologies and concepts quickly.
* Great organisational skills and attention to detail.
* Adaptability to do a range of work, including the complex, non-routine, mundane, and multi-environment.
* Able to work under direction, use discretion, and determine when to escalate issues.
* Effective communication, teamwork, and task-time management skills.
Bonus Points
* Prior experience working with one or more of the following SIEM or EDR tools – e.g., IBM QRadar, Sentinel, Rapid7, Defender for Endpoint, SentinelOne, Carbon Black, Sophos.
* Prior experience working for an MSSP.
* Prior experience working with SOAR technologies.
* Expertise in securing cloud-based infrastructures and tools.
* Experience managing databases for log aggregation and analysis.
Why Ekco
* Microsoft’s 2023 Rising Star Security Partner of the year.
* VMware & Veeam top partner status.
* Ranked as 4th fastest growing technology company in the Deloitte Fast50 Awards.
* Ekco is committed to cultivating an environment that promotes diversity, equality, inclusion, and belonging.
* We recognise the value of internal mobility and encourage opportunities for internal development & progression.
* Flexible working with a family-friendly focus are at the core of our company values.
#J-18808-Ljbffr