Senior SOC Engineer

Overview:

The Senior SOC Engineer leads security monitoring operations, threat detection, proactive threat hunting, and advanced security event analysis within the SOC. This role goes beyond day-to-day operational tasks—the specialist drives the development of new detection use cases, surfaces emerging threats before they materialize into incidents, and produces security insights that inform both tactical response and strategic decisions.

Responsibilities:

• Monitor and conduct in-depth investigation of alerts from Splunk, EDR, and DLP platforms.
• Lead proactive threat hunting exercises and perform advanced security analysis.
• Develop, tune, and optimize use cases and correlation rules within Splunk Enterprise Security.
• Support vulnerability management processes and track the progress of remediation activities.
• Produce operational dashboards, KPI metrics, and executive-level security reports for stakeholders.
• Collaborate with the engineering team to improve detection content quality and data source coverage.

Requirements:

• 5+ years of experience in SOC operations or security monitoring.
• Deep hands-on experience with Splunk Enterprise Security.
• Familiarity with EDR and DLP solutions, and working knowledge of the MITRE ATT&CK framework.
• Solid understanding of vulnerability management processes and incident response fundamentals.
• Ability to produce both technical and executive-level reports for diverse audiences.
• Strong analytical skills with the ability to derive actionable insights from security data.