Creating a safer cyberspace!
Horangi is looking for an experienced and professional Cloud SOC Engineer to join the Cyber Operations team. In this role, the Cloud SOC Engineer will manage and maintain SOC systems to ensure a high level of performance and security monitoring for Horangi’s Cloud SOC.
Your role as the Cloud SOC Engineer will include platform Security Monitoring and Analytics; overseeing and performing Security Engineering tasks and functions; and developing and maintaining application security services for lab and production environments. In addition, the candidate will be responsible for onboarding and integrating new log and event sources to Horangi security monitoring platforms. Candidate must develop a thorough understanding of the solution (cloud security platform, application, and processes being developed and implemented) to fully meet the technical requirements of the position.What you will be doing- Provide technical leadership as a senior member of the Horangi Cloud SOC
- Maintain highly visible hands on profile
- Design and implement a continuous process improvement program for SOC engineering tasks
- Perform Security Monitoring using Horangi Cloud Security platform, SIEM, EDR and IPS
- Perform Security Incident Response Process (SIRP)
- SIEM rule parsing development and testing
- WAF Policy development, implementation, and maintenance
- Horangi Cloud Security platform Maintenance and Management
- Collaborate with, and serve as the technical security representative to clients and Horangi internal operations
- Develop, enhance, and execute documented procedures for security related tasks, and ensure the overall availability of the security infrastructure
- Communicate with the SOC team on status, experiences, lessons learned, and on-going needs
What you will need to succeed- Bachelor’s in Computer Science, Information Management Systems and/or Cybersecurity or significant IT and Security work experience (5+ years)
- At least 5 years’ experience in designing, managing, or supporting data center or enterprise security systems and monitoring
- Security and IT certifications are a highly desirable
- Experience with cloud computing and cloud security technologies
- Excellent understanding and proven hands-on experience with a leading SIEM system (defining and building correlation, aggregation, normalization, and parsing)
- Proven experience in connecting SIEM to cloud resources or working with AWS security tools
- Experience in SOAR systems): design and implement playbooks, write scripts and tools (connectors) is an advantage
- Experience with intrusion detection and protection systems, network security, segmentation, and management SIEM, HIDS and IPS knowledge are a plus
- Knowledge and experience with Linux OS, Windows OS, and Scripting (Python, etc.)
- Knowledge and experience with IT service and security operations and management
- Superb troubleshooting, problem determination and resolution skills required
- Ability to translate business and regulatory security requirements into product deployment and operational processes
- Experience designing and operating network security systems and controls for medium to large enterprises
- Previous participation in a complete, ground-up product deployment
- Strong organizational skills, attention to detail and the ability to handle multiple projects simultaneously while meeting deadlines
- Excellent problem solving/analytical skills
- Excellent communication and interpersonal skills
- A team player working in a global team
- Ability to work in a fast-paced, multi-tasking environment
- The job requires high availability especially during emergencies and is not a 9 5 position
- Fluency in English is required