Senior SOC Engineer - DevOps

Overview

Job Description:

The Senior DevOps Engineer is a skilled resource with a background in DevOps, cybersecurity and a focus on managing and enhancing SOC technologies. You should bring at least 6 years of experience in DevOps/Platform, with a focus on managing and deploying various systems. The primary role will be to ensure the effective and efficient operation of SOC systems and tools in a secure manner. Robust skills in operating systems, networking, and scripting will be crucial in this role. The main responsibility will be on the broader aspect of DevOps/Platform engineering within both our internal and external SOC ecosystem with a specialization in threat intelligence solutions.

Responsibilities

Responsibilities:

• System Design and Implementation: Design, develop, and implement system solutions to improve stability and efficiency. Analyze system requirements and ensure that systems will be securely integrated with current applications. Work with internal teams to setup and maintain Staging and Production environments in both on-prem and cloud environments.
• Maintenance and Troubleshooting: Provide expert support for system management, monitoring and troubleshooting. Identify, diagnose, and resolve system issues to minimize downtime.
• Performance Optimization: Continuously monitor, manage, optimize, and report on the performance of SOC solutions, identifying and resolving any issues or bottlenecks, incidents and resolutions.
• Documentation: Maintain detailed documentation for system configurations, system changes, and service records.
• Collaboration and Knowledge Sharing: Collaborate with other SOC engineering teams to share knowledge, best practices, and lessons learned in threat intelligence management. Provide training and guidance to junior engineers as needed.
• Integration with SOC Tools: Collaborate with other SOC engineering squads to tightly integrate SOC ecosystem (SIEM, SOAR, EDR, NDR, Threat Intelligence) and workflows for stability, performance, and service excellence.
• Automation and Orchestration: Develop scripts and leverage automation tools to streamline operations and minimize manual intervention. This includes automating deployment processes, system configurations, and routine maintenance tasks.
• Continuous Improvement: Stay abreast of the latest trends and technologies in systems engineering, IaaC, automation, and microservices. Recommend and implement improvements to existing infrastructure and processes to enhance performance, reliability, and cost-efficiency.
• Threat Intelligence Solutions management: Manage and maintain enterprise and open-source threat intelligence platforms and solutions, including configuration, optimization, and integration with other SOC tools.
  
  

Skills

• Solid understanding of hosted and cloud platforms (AWS, Azure, Google Cloud) and their services.
• Solid knowledge of operating systems (Windows, Linux, macOS) and their security configurations.
• Thorough understanding of virtualization, network protocols, architecture, and security.
• Eager learner with strong analytical and problem-solving abilities.
• Proficiency in scripting languages (e.g., Python, Bash) for automation.
• Extensive knowledge in Git and automated build and deployment tools (such as Jenkins, Azure DevOps Pipelines) and utilizing Ansible, Terraform, etc. in hybrid environments.
• Deep understanding of APIs and how to integrate, parse, and produce desired results.
• Experience with microservices architecture and containerization technologies (e.g., Docker, Kubernetes).
• Ability to collaborate effectively with a variety of team members, including interfacing with customers to resolve issues.
• High proficiency in written and verbal communication.