SOC Engineer

Job description

UK Careers - SDI

-->
By playing this video you consent to Google/YouTube processing your data and using cookies – Learn more .

Position Description:

If you have an inquisitive nature and enjoy security technology, research and learning this role will put you at the forefront of CGI Cyber Security Service. The SOC is at the forefront of Technical automation and pushing into a Next-Gen SOC and this role proactively monitors the IT infrastructure for security incidents and participates in security incident investigation and resolution.

The Security Operations Centre is a fast-paced environment that is flexible and adaptable to the threat landscape we face. The SOC utilise both tried and tested tooling and state of the art technologies and methods to ensure we provide the best level of service and protection to our prestigious list of clients. Our client base covers a wide range of verticals from Government, MOD and CNI through to companies that are easily recognisable as household names.

Alongside a competitive salary, we offer access to our share scheme (3.5%+3.5% matching) making you a CGI Partner, not just an employee. You also have the option to benefit from private medical and dental insurance, flexible retirement options, an active sports and social club, and a cycle to work scheme to name a selection of the benefits available.

This role is based onsite and office attendance will be required. Due to the nature of the work, we can accept UK National's only for this vacancy and you'll be based out of our Reading office, with some requirement to attend Bristol and Wales. All applicants must hold or be eligible for SC clearance as a minimum requirement.

Your future duties and responsibilities:

As a SOC Engineer, you will play a critical role in maintaining and optimising the SOC infrastructure, ensuring its smooth and secure operation. This will include performing routine patching and upgrades, proactively addressing potential security and performance issues, and coordinating with other business units for incident management and patching activities. You will be responsible for responding to JIRA tickets on a weekly rota, sharing these responsibilities with your team.

In addition, you will provide essential support for SIEM-related queries, working closely with the SOC and other services. You will also contribute to successful project transitions, which may include building and configuring SIEM products, advising clients on network and endpoint configurations, and ensuring proper documentation and handover of new infrastructure to the SOC service.

Duties and responsibilities:

• Infrastructure Maintenance: Routine patching, upgrading, and proactive security monitoring.
• Incident Coordination: Collaboration with other business units for incident and patch management.
• Project Involvement: Participation in project design, planning, and client meetings as a subject matter expert (SME).
• SIEM Management: Building, configuring, and troubleshooting SIEM tools while managing on-boarding of endpoint devices.
• Documentation & Handover: Ensuring all project documentation and system handovers are completed thoroughly and accurately.

Required qualifications to be successful in this role:

You will possess strong problem-solving, reasoning, and troubleshooting skills, along with the ability to work effectively as part of a team. You'll also have excellent time-management and organisational abilities to handle aggressive timelines and high-pressure situations.

A solid understanding of networking principles, including TCP/IP, WANs, LANs, and common internet protocols (SMTP, HTTP, FTP, POP, LDAP), is essential. Experience with security compliance auditing and remediation is crucial for ensuring the security posture of the SOC.
Finally, familiarity with SIEM solutions such as ArcSight, Splunk, TippingPoint, Huntsman, or FortiAnalyzer is necessary for managing and analysing security incidents effectively.

Skills and Experience Required:

• Team Collaboration: Ability to work effectively within a team environment, handling pressure and managing time efficiently.
• Networking Knowledge: Proficiency in networking principles, including TCP/IP, WANs, LANs, and common internet protocols.
• SIEM Experience: Hands-on experience with SIEM tools like ArcSight, Splunk, or FortiAnalyzer for security monitoring and analysis.
• Security Compliance: Knowledge and experience in conducting security compliance audits and remediation.
• Communication Skills: Strong communication skills for interacting with peers, management, and clients.

Skills:

·  Security Infrastructure Supprt
·  Vulnerability Management(IAVM)
·  Dev/Tools Infrastructure Supp
·  Network Security
·  Security Operations Center

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.