About Ekco:
Founded in 2016, Ekco is now one of the fastest growing cloud solution providers in Europe!
We specialise in enabling companies to progress along the path of cloud maturity, managing transformation and driving better outcomes from our customers' existing technology investments.
In a few words, we take businesses to the cloud and back!
We have over 600 highly talented and supportive colleagues (and counting) across a number of regional offices in the UK, Netherlands, Ireland & Malaysia.
About the role:
We wish to appoint a SOC Engineer to our team. The candidate will be one of the leaders of a team that delivers a range of advisory and technology services to our clients. This is a great opportunity to become involved in a dynamic and rapidly growing team delivering a leading range of professional services offering.
EKCO will support you and encourage your growth and development to identify further potential and expertise in the cybersecurity field.
Your mission:
Develop content for a complex and growing SIEM infrastructure, including use cases, dashboards, active channels, reports, rules, filters, trends, and active lab sessions.
Use SIEM in daily operational work, which includes administering, operating, and managing the SIEM platform and ensuring the health of log sources, parsers, alerts, reports, etc.
Monitor SIEM and other event sources, assess, prioritize, escalate, and manage security alerts.
Perform analysis of security, network, database, and application logs, correlate events and activities to create threat scenarios to reduce exposure to threat actors.
Translate threat intelligence into actionable security across tools such as firewall, IPS, and malware detection across multiple security vendor platforms.
Track and resolve security incidents regularly and collaborate with other teams for resolution and suggest areas for improvement.
Must have some experience building custom connectors/parsers to point devices or IT assets that are not supported out of the box.
Own and operate the most important security solutions designed to protect the company from cyber threats and attacks.
Lead in deploying new solutions and technologies to improve the security posture of the company.
Continuously fine-tune our security solutions to reduce the occurrence of false positive and false negative alerts.
Working knowledge and experience with the MITRE framework for cyber adversary tactics and techniques.
Perform other duties as assigned.
To be successful in this role you'll need:
A Bachelor's degree or equivalent in Computer Science, Computer Engineering, Electrical Engineering, Network Security, Information Security, Information Technology, or Mathematics (or equivalent work experience).
Keen problem-solving/troubleshooting skills.
A can-do attitude.
Excellent written and verbal communication skills; you should be able to communicate technical details clearly.
The ability to adjust and adapt to changing priorities in a dynamic environment.
A pro-active approach to addressing issues and requests and the ability to multi-task.
The ability to learn new technology and concepts quickly.
Great organisational skills and attention to detail.
Experience supporting and administering Splunk.
5 to 10 years of professional experience.
Bonus points if you have:
Prior experience working with SIEM or EDR – e.g., SPLUNK, IBM QRadar, Sentinel, Rapid7, Carbon Black, ZScaler, and Proofpoint.
Industry-recognized certifications – e.g., CompTIA Security+, CySA+, Microsoft SC-200.
Demonstrated knowledge of TCP/IP networking and major protocols such as HTTP, SSL/TLS, DNS, SMTP.
An understanding or proficiency in information security and compliance regulations (ISO 27001, PCI DSS, GDPR).
Theoretical or practical knowledge in the following areas:
Unix, Linux, Windows operating systems.
Exploits, vulnerabilities, network attacks.
Well-known networking protocols and services (FTP, HTTP, SSH, SMB, LDAP, etc.).
Packet analysis tools (tcpdump, Wireshark, ngrep, etc.).
Regular expressions.
Database structures and queries.
Why Ekco:
Microsoft's 2023 Rising Star Security Partner of the Year.
VMware & Veeam top partner status.
Ranked as the 4th fastest growing technology company in the Deloitte Fast50 Awards.
Ekco is committed to cultivating an environment that promotes diversity, equality, inclusion, and belonging.
We recognise the value of internal mobility and encourage opportunities for internal development & progression.
Flexible working with a family-friendly focus is at the core of our company values.#J-18808-Ljbffr