Senior SOC Analyst / Lead – Cyber Defence

About the role

As a Security Platform Engineer & SOC Specialist, you will strengthen Circles’ cyber defence posture by engineering and automating core security platforms, designing, enhancing, and maintaining SIEM, SOAR, threat detection pipelines, and leading offensive security initiatives.

Key responsibilities

• Architect, deploy, and optimize SIEM/SOAR platforms (e.g., Splunk, ELK, QRadar) with scalable log ingestion, enrichment, and correlation pipelines.
• Build automation frameworks and SOAR playbooks to streamline alert enrichment, response orchestration, and remediation workflows.
• Integrate custom telemetry and hybrid‑cloud data sources to enhance SOC observability and adaptive threat detection.
• Develop Python/Bash automation and AI/ML‑driven logic for intelligent alert triage and noise reduction.
• Lead periodic penetration testing, red‑team, and adversary emulation exercises to identify and exploit vulnerabilities.
• Support SOC operations during high‑severity incidents, develop threat detection content and runbooks aligned with MITRE ATT&CK.

Required profile

• Bachelor’s degree in Computer Science, Engineering or related field, or equivalent experience.
• 6+ years of hands‑on SOC platform engineering, incident management and penetration testing.
• Experience with SIEM tools such as Graylog, Splunk, ELK, Rapid7, LogRhythm, QRadar.
• Relevant certifications (GCIH, GCIA, Splunk/QRadar) are a plus.

Required skills

• SIEM/SOAR platforms (Splunk, ELK, QRadar, Graylog, Rapid7, LogRhythm).
• Python and Bash scripting.
• Automation and orchestration frameworks.
• Penetration testing and red‑team methodologies.
• MITRE ATT&CK framework knowledge.