SOC Engineer / Cyber Security Engineer

Certifications Required: CEH, CompTIA Security+, SOC Handling, SIEM Implementation

· Vendor-specific certifications: ELK, QRadar, Wazuh (advantage)

· Fortinet NSE, Cisco CyberOps, (plus)

At least four years Bachelors in IT / Computer Science / Telecom/ Engineering

Experience: 3-4 years of relevant professional experience in SOC operations, cyber security, or incident response.

Responsibilities:

· Monitor real-time threats and handle security incidents across Client IT systems using advanced SOC tools.

· Deploy, configure, and manage SIEM solutions (Wazuh, Splunk, ELK, QRadar, etc.) for log collection, analysis, intrusion detection, and anomaly reporting.

· Perform malware analysis, digital forensics, and evidence preservation to support cybercrime investigations.

· Implement and integrate threat intelligence feeds tailored for law enforcement use cases.

· Utilize frameworks such as MITRE ATT&CK and NIST for incident detection, classification, and response.

· Conduct forensic investigations with tools such as Volatility, Autopsy, Ghidra, and IDA Pro.

· Carry out vulnerability assessments, penetration testing, and remediation planning.

· Monitor and tune firewalls, IDS/IPS, and VPN security systems.

· Familiarity with security tools and devices.

· Support law enforcement digital platforms (CCTV, bodycams, and surveillance systems) by securing data pipelines and ensuring data integrity.

· Conduct awareness sessions for Client officers on phishing, ransomware, and cyber hygiene best practices.

· Collaborate with Client units for proactive threat hunting and incident response.

· Manage the full incident response lifecycle: detection, triage, containment, eradication, recovery, and reporting.

· Prepare incident reports, forensic documentation, and compliance reviews for audits and investigations.

· Provide IT assistance during emergency response operations.

· Perform any other tasks assigned by Client.

Job Type: Full-time

Work Location: In person