SOC部署工程师
SOC Deployment Engineer
Phoenix 在英国公共部门推动数字化转型，使组织能够通过云和混合基础设施、数据、人工智能、安全和协作技术进行创新。
我们现在正在招聘一名 SOC 部署工程师加入我们的安全运营中心（SOC），以支持我们托管安全服务的交付。该职位将专注于安全工具的部署、配置和优化，帮助确保客户环境顺利上线并受到安全监控。
与 SOC 分析师、工程师和客户紧密合作，您将支持 SIEM 和 SOAR 技术的实施，维护 SOC 基础设施，并为持续提升我们的安全运营能力做出贡献。
您将负责哪些工作？
- 设计、部署和支持 SIEM 解决方案，以满足客户的网络安全需求。
- 与客户和内部利益相关者合作，收集需求并支持上线活动。
- 配置和优化 SIEM 平台，以提高性能、可见性和检测能力。
- 支持 SOAR 脚本的开发和部署，以简化事件响应流程。
- 维护 SOC 基础设施的可用性和性能，包括服务器、网络和安全设备。
- 配置和优化日志采集管道和安全工具集成。
- 管理 SOC 工单队列并确保达成服务级别协议。
- 确保事件被准确记录、跟踪和文档化。
- 支持托管安全服务的持续开发和改进。
- 与分析师、工程师和服务团队合作，提高运营效率。
- 为安全工具的改进、流程优化和操作标准做出贡献。
我们寻找怎样的人？
- 具备设计、部署和支持 SIEM 解决方案的经验，最好是 Microsoft Sentinel。
- 具备在 Microsoft Azure 环境中工作的经验。
- 对 SOC 运营和托管安全服务有良好的理解。
- 了解安全技术、威胁检测和安全监控。
- 对网络和通信协议（包括 HTTP、DNS 和 TCP/UDP）有深入理解。
- 了解恶意软件技术、持久化机制和威胁行为者的活动模式。
- 具备使用脚本或自动化语言（如 PowerShell、Python、Bash 或类似语言）的经验。
- 具备使用虚拟化技术（如 VMware）的经验。
- 无
查看英文原文
Phoenix enables digital transformation across the UK public sector, empowering organisations to innovate with cloud and hybrid infrastructures, data, AI, security and collaboration technologies.
We are now hiring a SOC Deployment Engineer to join our Security Operations Centre (SOC) and support the delivery of our managed security services. This role will focus on the deployment, configuration and optimisation of security tooling, helping ensure customer environments are onboarded effectively and monitored securely.
Working closely with SOC Analysts, Engineers and customers, you will support the implementation of SIEM and SOAR technologies, maintain SOC infrastructure and contribute to the ongoing improvement of our security operations capabilities.
What will you be doing?
- Design, deploy and support SIEM solutions to meet customer security requirements.
- Work with customers and internal stakeholders to gather requirements and support onboarding activities.
- Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability.
- Support the development and deployment of SOAR playbooks to streamline incident response processes.
- Maintain the availability and performance of SOC infrastructure, including servers, networks and security appliances.
- Configure and optimise log ingestion pipelines and security tool integrations.
- Manage SOC ticket queues and ensure service-level agreements are achieved.
- Ensure incidents are accurately logged, tracked and documented.
- Support the ongoing development and improvement of managed security services.
- Collaborate with analysts, engineers and service teams to improve operational effectiveness.
- Contribute to security tooling enhancements, process improvements and operational standards.
What are we looking for?
- Experience designing, deploying and supporting SIEM solutions, ideally Microsoft Sentinel.
- Experience working with Microsoft Azure environments.
- Good understanding of SOC operations and managed security services.
- Knowledge of security technologies, threat detection and security monitoring.
- Strong understanding of networking and communication protocols including HTTP, DNS and TCP/UDP.
- Understanding of malware techniques, persistence mechanisms and threat actor behaviours.
- Experience with scripting or automation languages such as PowerShell, Python, Bash or similar.
- Experience working with virtualisation technologies such as VMware.
- Understanding of cloud environments including Azure and AWS.
- Knowledge of security domains such as identity and access management, web security, intrusion detection and cloud security.
- Strong troubleshooting, analytical and problem-solving skills.
- Excellent communication and stakeholder engagement skills.
Experience & Qualifications
- Experience working within a SOC, cyber security or security engineering environment.
- Experience deploying and supporting SIEM technologies.
- Experience supporting enterprise security tooling and infrastructure.
- Experience working with security automation technologies beneficial.
- Relevant Microsoft, cyber security or infrastructure certifications desirable.
Practical stuff
Where is the role based?
This role can be fully remote within the UK, with quarterly visits to our HQ in Pocklington (YO42).
How many interviews?
Following a screen with the Recruitment Team, you can expect a two-stage interview process.
Important Security Clearance
Due to the nature of our customer base and managed security services, SC clearance is required for this role. Candidates must either already hold active SC clearance or be eligible and willing to obtain and maintain it.
To obtain SC clearance, candidates will normally need to have lived continuously in the UK for at least five years and satisfy the relevant security vetting requirements.
Important BPSS Check
As part of our recruitment process and due to the nature of the work we do, all employees are required to undertake a BPSS check. While some employees may require further security clearance, the BPSS check is mandatory and all offers of employment are conditional upon successful completion.
Have you made it this far?
If you're still reading, we think there's a strong chance you might be our kind of person.
Here's the thing, research suggests many women and underrepresented groups don't apply unless they meet every requirement. Even if you don't tick every box above, we encourage you to introduce yourself.
We believe a diversity of perspectives and experiences makes a team stronger, and the stronger our team, the more successful we will be.
Originally posted on Himalayas