Security operations analyst

About the role

1.1 SIEM G SOAR Engineering (Palo Alto Cortex) 1.2 Endpoint Security Engineering (CrowdStrike Falcon) Engineer and maintain security log collection from multi-cloud environments into the SIEM, including: 1.4 Microsoft Entra ID G Office 365 Integration

What you'll do

• Design, deploy and maintain log source integrations into Palo Alto Cortex XSIAM / XSOAR, ensuring normalisation
• Develop, test and continuously improve SOAR playbooks for automated triage, enrichment and response across key incident types
• Own SIEM content including detection rules, correlation policies, dashboards and alert thresholds; perform ongoing tuning to reduce false-positive volumes
• Maintain platform health including connector status monitoring, API rate-limit management and capacity planning for log ingestion pipelines
• Administer and engineer the CrowdStrike Falcon platform, including sensor deployment management, policy configuration and response workflow alignment with SOC procedures

What you need

• SIEM
• Incident response
• Cloud security
• EDR
• Firewalls
• IAM
• Any graduate

Good to have

• AWS
• Office 365
• Azure
• GCP