Job Description

Tasks:

Manage and implement technical customer onboarding and integrations with SOC platforms, including SIEM, Microsoft Azure, Defender, Splunk, and ITSM systems.
Configure, maintain, and continuously improve SOC security tools, monitoring platforms, and related cloud security services.
Apply technical expertise to implement and support core security technologies, including SIEM/SOAR platforms (Sentinel, Splunk), endpoint protection, and threat intelligence integrations.
Support the handling of critical-severity incidents by providing technical input, assisting escalation decisions, and ensuring appropriate response and follow-up actions.
Develop and maintain automations, integrations, and CI/CD pipelines to improve SOC detection and response efficiency.
Participate in threat hunting, threat intelligence, and security investigations, supporting incident response when required.
Identify and implement