Senior SOC Engineer

About Ekco

🚀 Founded in 2016 Ekco is now one of the fastest growing cloud solution providers in Europe!

We specialise in enabling companies to progress along the path of cloud maturity, managing transformation and driving better outcomes from our clients’ existing technology investments.

☁️ In a few words, we take businesses to the cloud and back!

🌍 We have over 1000 highly talented and supportive colleagues (and counting) across a number of regional offices in the UK, Benelux & Ireland. 

The Role

As a SOC Engineer your primary objective is to configure, implement, and maintain the critical infrastructure that supports Security Operations Center (SOC) functions. Your role ensures the seamless operation, scalability, and security of the SOC’s underlying systems, enabling the team to deliver effective cybersecurity services to clients.

Reporting to the regional Head of SOC, the role of SOC Engineer will play a crucial role in deploying, maintaining and monitoring customer SOC tools and underlying infrastructure.

Day to day your role will involve

• Configure, maintain, and optimize SOC-related infrastructure, including servers, virtual environments, and cloud platforms.
• Install, manage, and troubleshoot security tools such as SIEMs, EDR, and log management systems.
• Assist in provisioning and configuring tools and systems for new clients, ensuring smooth integrations into SOC workflows.
• Monitor SOC infrastructure performance, ensuring high availability and minimal downtime.
• Maintain detailed records of infrastructure configurations, updates, and changes to support auditing and troubleshooting.
• Develop and implement scripts or workflows to automate routine tasks and improve operational efficiency.
• Manage user accounts, roles, and permissions across SOC systems to maintain security and compliance.
• Collaborate with SOC analysts and engineers during incident investigations to ensure infrastructure supports effective responses.
• Monitor ticket queues, ensuring adherence to KPIs (E.g. Mean Time to Respond, Mean time to Escalate and Mean Time to Close etc.)
• Review and respond to inbound queries & requests from customers in the SOC ticketing system.
• Attend Client and escalation calls where required.
• Evaluate and recommend enhancements or new security technologies/tools to improve SOC capabilities.
• Identify and implement parsing configuration as required to optimise log source configuration, aiding investigation efforts.
• Acting as subject matter expert, investigating security events forwarded from clients.
• Act as a key contributor to SOC continuous improvement criteria as required, identifying gaps in existing processes, proposing and documenting working solutions to close gaps.
• Develop, document, and deliver training material for the SOC Engineering team, providing granular instructions for SOC processes and processes.
• Create custom, ad hoc and monthly reporting solutions for SOC customers as required.
• Performing other duties as assigned by SOC Leadership

About You

• Have a minimum of 4+ years experience working in a SOC environment
• Experience with Microsoft Sentinel 
• Experienced with deployments
• Practical experience in managing and working with hardware infrastructure
• Working knowledge in the following areas:
• Network configuration management
• Unix, Linux, Windows, etc. operating systems
• System Administration (On-prem & Cloud)
• Virtualization technologies
• Packet analysis tools (tcpdump, Wireshark, ngrep, etc.)
• Adhere to security configuration best practices in all aspects of daily duties
• Keen problem solving / troubleshooting skills
• Strong analytical skills and a logical approach to resolving issues
• A can-do attitude
• Excellent written and verbal communication skills. You should be able to communicate technical details clearly at all levels.
• The ability to adjust and adapt to changing priorities in a dynamic environment
• A pro-active approach to addressing issues and requests and the ability to multitask
• The ability to learn new technologies and concepts quickly
• Great organisational skills and attention to detail
• Adaptability to do a range of work, including the complex, non-routine, mundane and multi-environment
• Able to work under direction, use discretion and determine when to escalate issues
• Effective communication, teamwork and task-time management skills

Bonus Points

• Prior experience working with one or more of the following SIEM or EDR tools – E.g. IBM QRadar, Sentinel, Rapid7, Defender for Endpoint, SentinelOne, Carbon Black, Sophos
• Prior experience working for a MSSP
• Prior experience working with SOAR technologies.
• Expertise in securing cloud-based infrastructures and tools.
• Experience managing databases for log aggregation and analysis. 

Benefits/Perks

• ☀️ Time off - 25 days leave + public holidays
• 🎂 x1 day Birthday leave per year
• 💰 Company Pension Scheme (employer contribution 5%) + flexible salary sacrifice
• 📞 Employee Assistance Programme (EAP) - access to dedicated mental health, emotional wellbeing and general advice
• 🏃‍♀️ EkcOlympics - a global activity for fun!
• 📚 Learning & development - Unlimited access to Pluralsight learning platform

• 🌱 A lot of responsibilities & opportunities to grow (also internationally)

Why Ekco

• ⭐️ Microsoft’s 2023 Rising Star Security Partner of the year
• 🚀 VMware & Veeam top partner status
• 🏅 Ranked as 4th fastest growing technology company in the Deloitte Fast50 Awards
• 🌈Ekco are committed to cultivating an environment that promotes diversity, equality, inclusion and belonging
• 🎉 We recognise the value of internal mobility and encourage opportunities for internal development & progression
• ✨ Flexible working with a family friendly focus are at the core of our company values