SOC Engineer

If you have an inquisitive nature and enjoy security technology, research and learning this role will put you at the forefront of CGI Cyber Security Service. The SOC is at the forefront of Technical automation and pushing into a Next-Gen SOC and this role proactively monitors the IT infrastructure for security incidents and participates in security incident investigation and resolution., As a SOC Engineer, you will play a critical role in maintaining and optimising the SOC infrastructure, ensuring its smooth and secure operation. This will include performing routine patching and upgrades, proactively addressing potential security and performance issues, and coordinating with other business units for incident management and patching activities. You will be responsible for responding to JIRA tickets on a weekly rota, sharing these responsibilities with your team.

In addition, you will provide essential support for SIEM-related queries, working closely with the SOC and other services. You will also contribute to successful project transitions, which may include building and configuring SIEM products, advising clients on network and endpoint configurations, and ensuring proper documentation and handover of new infrastructure to the SOC service., * Infrastructure Maintenance: Routine patching, upgrading, and proactive security monitoring.

• Incident Coordination: Collaboration with other business units for incident and patch management.

• Project Involvement: Participation in project design, planning, and client meetings as a subject matter expert (SME).

• SIEM Management: Building, configuring, and troubleshooting SIEM tools while managing on-boarding of endpoint devices.

• Documentation & Handover: Ensuring all project documentation and system handovers are completed thoroughly and accurately.

You will possess strong problem-solving, reasoning, and troubleshooting skills, along with the ability to work effectively as part of a team. You’ll also have excellent time-management and organisational abilities to handle aggressive timelines and high-pressure situations.

A solid understanding of networking principles, including TCP/IP, WANs, LANs, and common internet protocols (SMTP, HTTP, FTP, POP, LDAP), is essential. Experience with security compliance auditing and remediation is crucial for ensuring the security posture of the SOC.

Finally, familiarity with SIEM solutions such as ArcSight, Splunk, TippingPoint, Huntsman, or FortiAnalyzer is necessary for managing and analysing security incidents effectively.

Skills and Experience Required:

• Team Collaboration: Ability to work effectively within a team environment, handling pressure and managing time efficiently.

• Networking Knowledge: Proficiency in networking principles, including TCP/IP, WANs, LANs, and common internet protocols.

• SIEM Experience: Hands-on experience with SIEM tools like ArcSight, Splunk, or FortiAnalyzer for security monitoring and analysis.

• Security Compliance: Knowledge and experience in conducting security compliance audits and remediation.

• Communication Skills: Strong communication skills for interacting with peers, management, and clients.

Together, as owners, let’s turn meaningful insights into action.

• Cycle to work scheme

• Private dental insurance

• Private medical insurance, Alongside a competitive salary, we offer access to our share scheme (3.5%+3.5% matching) making you a CGI Partner, not just an employee. You also have the option to benefit from private medical and dental insurance, flexible retirement options, an active sports and social club, and a cycle to work scheme to name a selection of the benefits available.

CGI

350 Brook Drive, Reading

Permanent, Full-time