Loxam are currently recruiting an IT SOC Engineer to join our IT Security team at our Head Office in Lutterworth.

The SOC Engineer role will be part of the LOXAM Security Operations Centre and will report to the Director of Security Operations. The SOC Engineer's primary role will be to develop and maintain Security Operations Centre (SOC) tools, including Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR), to define and continuously develop a use case-driven logging, monitoring and response capability to ensure responsiveness and resilience to cyber security threats.

This role will involve a mix of technical security skills, project planning, security operations, and governance, including maintaining security operations processes and procedures and demonstrating that security controls are embedded across the SOC team.

The role will require analytical skills, solid IT skills, and an understanding of the practical application of information security.

The role will require working closely with the IT and business functions at all levels in all operating countries to ensure security-related activities are completed.

In return you will receive a Competitive Salary, 25 days annual leave plus bank holidays, Auto enrolment pension scheme, Life Assurance, Westfield Health Cash plan & Lifestyle benefits – Discount on selected stores.

Responsibilities Include

• Develop content for a complex and growing SIEM infrastructure. This includes use cases, dashboards, active channels, reports, rules, filters, trends and active lab sessions.
• Use SIEM in the daily operational work, which includes but is not limited to administering, operating, and managing the SIEM platform and regular activities of ensuring the health of log sources, parsers, alerts, reports, etc. and ensuring that the platform is operating as planned.
• Monitor SIEM and other event sources, assess, prioritise, escalate and manage security alerts.
• Perform analysis of security, network, database and application logs, correlate events and activities to create threat scenarios in order to get ahead of threat actors and reduce exposure.
• Help the imminent threat/zero-day response function across the environment.
• Translate threat intelligence into actionable security across tools such as firewalls, IPS and malware detection across multiple security vendor platforms.
• Support the tracking and resolution of security incidents on occasion, and collaborate with other teams for resolution and suggest areas for improvement.
• Must have experience building custom connectors/parsers, etc., to point devices or IT assets that are not supported out of the box.
• Continuous work with IT Operations to fine-tune security solutions to reduce the occurrence of false positive and false negative alerts.
• Working knowledge and experience with the MITRE framework for cyber adversary tactics and techniques