£1/yr
City of Edinburgh, Scotland
Permanent, Variable

Senior Cybersecurity Operations Engineer CSOC - SIEM / SOAR / EDR

Posted by Candidate Source - TEAM.

A Senior Cybersecurity Operations (CSOC) Engineer is required to work with a leading organisation in Edinburgh that has one of the best employer reputations in Scotland, an employer with a customer focused culture where they value collaboration and ingenuity, and their success is underpinned by their extensive use of technology to drive success in their business.

Due to a recent internal promotion, our client is looking to hire a key member to their cybersecurity team, acting as subject matter expert on Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), and Security Orchestration, Automation, and Response (SOAR) - you will drive creativity and innovation within the team and will ensure the highest level of defensive security capabilities as possible. A key part of the role is research and comprehending common attack patterns, modern tactics, techniques, and procedures (TTPs) - developing and implementing creative custom detections with automation to increase the efficiency of detection across the organisation.

Acting as a Technical Lead you will be responsible for leading projects related to the research, evaluation, and implementation of a range of security technologies, and you will be a key member of the incident response team dealing with any security incidents. Working together with your colleagues across the business you will help create an inclusive security culture and will be adept at explaining technical security issues in terms that can be understood by all, regardless of their technical knowledge.

They are offering a great salary and benefits package for the successful candidate, including 15% pension contributions, annual bonus, private health cover, and an enhanced maternity / paternity package

Responsibilities as Senior Cybersecurity Operations Engineer:

  • Be a key figure in developing and improving the security capabilities of the organisation, especially around the leveraging of automation to improve speed and efficiency of detection
  • Supporting security infrastructure and tooling across technologies such as SIEM, SOAR, XDR, AV, NDR, and VM
  • Evaluate, review, and implement new security technologies that improve the organisation's security position
  • Deliver cybersecurity expertise across the business, leading / supporting security and business change projects
  • Act as a cybersecurity champion across the organisation, building a growing awareness amongst employees of different security risks and the best practices to follow
  • Assist in dealing with investigations into security alerts as and when required and participate in cyber security incident response team (CSIRT)
  • Articulating complex security issues across different departments to both technical and non-technical stakeholders

We're looking for a Senior Cybersecurity Operations Engineer with:

  • Extensive experience working in a cybersecurity role at an enterprise level organisation or consultancy organisation
  • Experienced in IT security best practices and able to demonstrate a high level of proficiency in common attack types and patterns, able to understand tactics, techniques, and procedures - ensuring high-level detection success
  • Experience using SIEM and SOAR solutions such as Splunk and XSOAR, or similar tooling
  • Experience working with End Point Detection tools such as Defender, CrowdStrike, Huntress, Heimdal, or SentinelOne
  • Knowledge of Linux systems administration (RedHat or CentOS) and Windows Server, able to understand the underlying infrastructure of internal systems and potential security weak points
  • Any scripting experience such as Bash, Python, or similar scripting languages
  • Any security or technical certifications such as CISSP, OSCP, Security+, SC-200, CySA+, CCNA, AZ500, RHCSA

Benefits Details:

  • Superb pension package
  • Annual bonus scheme
  • Private health cover
  • Enhanced maternity / paternity package

To apply for this role as Senior Cybersecurity Operations Engineer, please click apply online and upload an updated copy of your CV.

Note: The job title of ‘Senior' relates simply to the level of experience and has no relevance to age. You are encouraged to apply for any opportunities that you feel to be suitable, irrespective of age or level of experience.

Candidate Source Ltd is an advertising agency. Once you have submitted your application it will be passed to the third party Recruiter who is responsible for processing your application. This will include holding and sharing your personal data, our legal basis for this is legitimate interest subject to your declared interest in a job. Our privacy policy can be found on our website and we can be contacted to confirm who your application has been forwarded to.

We use cookies to measure usage and analytics according to our privacy policy.