The Junior SOC Engineer supports the operation, maintenance, and improvement of SOC detection and response capabilities under the guidance of senior SOC engineers.

The role focuses on developing foundational engineering skills across SIEM management, detection use cases, playbooks, and incident support, working under the guidance of senior SOC engineers. The position contributes to improving threat detection, response consistency, and operational effectiveness within the SOC.

Key Responsibilities:

SIEM Engineering & Operations

• Assist with the deployment, configuration, and ongoing maintenance of SIEM platforms and data feeds.
• Support onboarding, parsing, and normalisation of log sources across on‑premises and cloud environments.
• Contribute to the creation, tuning, and maintenance of SIEM detection rules and correlation searches.
• Perform basic health checks and troubleshooting of SIEM data ingestion issues.

• Assist senior engineers and analysts during investigations and incident response activities.
• Support continuous improvement of detections based on incident findings and threat intelligence.

• Support integration of playbooks with SOAR platforms.
• Help update and refine playbooks based on lessons learned and feedback from incidents.

Threat Modelling & Use Case Development

• Participate in threat modelling activities using frameworks such as MITRE ATT&CK and STRIDE.
• Assist in translating threat models and attack techniques into SIEM detection use cases.

Reporting, Documentation & Collaboration

• Assist in building SOC dashboards and reports covering alert trends, incidents, and security posture.
• Maintain documentation for SIEM configurations, detection logic, runbooks, and playbooks.
• Support preparation of operational and monthly service reports as required.
• Collaborate with SOC analysts, engineers, IT, and cloud teams to support secure configurations and logging coverage.