Overview
The Security Operations Engineer will work on a contract basis within a highly regulated environment, focusing on the monitoring, detection, investigation, and response to security threats across Microsoft and hybrid systems. This role involves collaborating with various teams to enhance security posture and protect critical business assets through proactive threat hunting and operational support.
Responsibilities
- Investigate and respond to escalated security incidents and events.
- Perform event-based and policy-based threat hunting activities.
- Develop and maintain threat detections within Microsoft Defender XDR.
- Support network security monitoring and detection capabilities using Zscaler.
- Analyse security alerts, identify risks, and coordinate remediation activities.
- Provide technical and operational support for Identity & Access Management (IAM) initiatives.
- Support Data Loss Prevention (DLP) programmes and associated controls.
- Collaborate with Infrastructure, Security, and Technology teams to strengthen overall security posture.
Requirements
- Strong experience within a Security Operations (SOC) environment.
- Hands-on experience investigating and responding to security incidents.
- Experience with Microsoft Defender XDR and security monitoring platforms.
- Knowledge of threat hunting methodologies and detection engineering.
- Experience working with network security technologies, ideally Zscaler.
- Understanding of Identity & Access Management (IAM) principles and technologies.
- Experience supporting or administering Data Loss Prevention (DLP) controls.
- Familiarity with Microsoft security technologies and cloud environments.