- Deploy and operate SOC platforms including SIEM, EDR, SOAR, NDR, and TIP across cloud and on-premises environments, ensuring availability and performance.
- Manage log ingestion pipelines (e.g. Azure Event Hubs, forwarders, parsing, indexing) to ensure datacompleteness, normalization, and integrity for detection use cases.
- Administer infrastructure systems (Windows, Linux, cloud services), including patching, hardening, backupvalidation, and access control enforcement via centralized identity platforms.
- Integrate the security tooling ecosystem (e.g. Splunk, Microsoft Defender, Cortex XSOAR, TIPs), ensuringstable interoperability and data exchange.
- Support detection and incident response by ensuring availability, retention, and quality of telemetryrequired for investigations and threat hunting.
- Monitor and optimize platform health and capacity, identifying performance bottlenecks, ingestion issues,and scalability constraints.
- Maintain documentation and drive continuous improvement, including SOPs, data flow mappings, andoptimization initiatives for cost, performance, and detection coverage.
- Hands-on experience with SOC technologies (SIEM, EDR, SOAR) and log management architectures.
- Strong system administration expertise across Windows, Linux, and cloud environments (Azure preferred).
- Proven ability to troubleshoot distributed systems and ingestion pipelines, including root cause analysisand remediation.
- Experience with Splunk Cloud architecture, including ingestion optimization and index management.
- Familiarity with log pipeline optimization tools (e.g., Cribl) and data reduction strategies.
- Knowledge of cloud-native security services (Azure Event Hubs, Log Analytics, Defender suite).
- Advanced knowledge of networking concepts including TCP/IP, DNS, routing, segmentation, and secureconnectivity.
As an Infrastructure Support Specialist, you are part of the Information Security Services (ISS) Team,contributing across Engineering, Architecture, and System Administration. You are responsible for theimplementation, operation, and optimization of SOC infrastructure and security platforms, ensuring reliable,secure, and scalable environments that enable detection, incident response, and threat intelligencecapabilities.
As part of the Global SOC team, you collaborate with other cybersecurity professionals to proactively identify,mitigate, and respond to potential threats and vulnerabilities. You work closely with detection engineers,incident responders, and threat intelligence analysts to ensure that SOC platforms continuously deliver thetelemetry, performance, and coverage required to protect the Group.
