Security Consultant (SOC Engineering)
Adarma, United Kingdom
Job Description
We are ADARMA, one of the largest independent security services companies in the UK. As a business formed and run by former senior security leaders, we know our stuff. Which is why our clients include 30% of FTSE 100 organisations from all industry sectors.
Experienced Security Consultant or Senior Splunk Engineer required to work in our Managed Services SOC. The Adarma SOC provides a variety of SOC services such as Managed Detection and Response, Threat Intelligence, Endpoint Detection and Response, SIEM Support, and Vulnerability Management. All of these services are provided to a range of clients covering a wide variety of industries. The exposure and experienced gained working in this role will be second to none and would suit an ambitious, talented Splunk Architect or Consultant, looking to take their career to the next level.
Come and join our team we guarantee you will be enthralled, immersed, constantly challenged and never bored!
Security Consultant (SOC Engineering)
Responsible for assisting in the development and support of the SOC SIEM platform and other supporting tooling (Phantom, Jira, Adarma CMMP). Working together with SOC Pods and the Managed Detection and Response (MDR) team to ensure that all SOC service platforms, perform as effectively and efficiently as possible, whilst ensuring maximum availability of the platform.
The consultant is also responsible for assisting in the development and maintenance of client detection rules, playbook writing and case automation.
Principle Accountabilities:
- Responsible for understanding SOC customer requirements, collecting data, delivering analysis and problem resolution
- Identify and recommend SOC client use cases. These will be based on threat intelligence sources that cover a wide variety of industries
- Design, implement, review and improve SOC client detection rules, automation playbooks and response processes
- Identify and asses the suitability of appropriate data sources to be onboarded into the SOC SIEM
- Identify, evaluate and recommend architectural solutions for internal use and client owned environments
- Develop and maintain a high standard of system and process documentation for the SOC Engineering Team
- Provide mentorship and guidance to the SOC engineering team on the latest SOC technology, use of best practice and adherence to SOC processes and procedures
- Assist in setting a development path for SOC engineers
- Provide subject matter expertise to and participate in SOC related projects
- Attend SOC client calls and ensure that information is recorded and readily communicated to the SOC Engineering Team and MDR team.
- Maintain a positive rapport with clients and work to give clients the best possible service
- Ensure that all client use cases and data onboarding requests are delivered in accordance with client SLAs
- Assist the SOC Engineering Lead in other tasks as required
Requirements
Knowledge and Skills
- Splunk Architect certification or above
- A degree in a STEM related discipline (or equivalent experience)
Experience:
Essential
- Minimum of two years’ experience administrating and supporting an enterprise level Splunk deployment
- Strong understanding of SPL and onboarding new data
Desirable
- Previous experience of working with Splunk Cloud
- Experience of provisioning and configuring AWS, Azure or Google cloud technologies
- Security related vendor certifications such as SANS, EC Council, Comp TIA, Microsoft or AWS
- Cloud
- Python, shell scripting and XML
Benefits
Excellent reward package including (but not limited to): membership to a group personal pension plan, private health care, life insurance of four times salary, discretionary bonuses, membership to a health and well-being cash back scheme, gym membership discounts and access to a 24/7 employee assistance programme.
Adarma is committed to encouraging a positive working culture by focusing on personal development through training and providing various opportunities for employees to share their ideas and influence the direction of the business.
All requests for flexible working are considered on a case by case basis to balance employee and client requirements.