SOC Engineer

Stack

Responsibilities

• ▹Onboard new customer log sources into NVISO's SIEM platforms (Microsoft Sentinel, Elastic Cloud), preferring native connectors, falling back to NVISO-managed log forwarders where needed
• ▹Design, deploy and maintain log forwarding infrastructure, including load-balanced forwarder clusters, in customer environments
• ▹Build and maintain parsers, normalization and enrichment logic so data lands in the SIEM in a format detection engineering can rely on
• ▹Configure and integrate EDR/XDR platforms (Microsoft Defender for Endpoint, Cortex XDR, SentinelOne, Microsoft Defender XDR) and cloud monitoring (Azure, AWS)
• ▹Support the detection engineering team with platform-side rule deployment and testing across SIEM and EDR/XDR ecosystems
• ▹Build automations and integrations on the SOAR platform (XSOAR) and contribute to the Core platform (Azure Functions, Durable Task Scheduler, Application Insights, Log Analytics, Bicep-based IaC)
• ▹Contribute to the evolution of the Self-Service Onboarding capability
• ▹Define high-level engineering patterns and reusable building blocks rather than one-off solutions
• ▹Participate in technical workshops with customers
• ▹Mentor more junior colleagues and act as a technical point of reference

Requirements

• ▹Hands-on experience with SIEM platforms such as Microsoft Sentinel and Elastic Cloud
• ▹Experience with EDR/XDR platforms such as Microsoft Defender for Endpoint, Cortex XDR, SentinelOne
• ▹Experience with cloud platform monitoring on Azure and AWS
• ▹Experience designing and operating log forwarding infrastructure and log onboarding, parsing and normalization
• ▹Experience with SOAR platforms (XSOAR) and infrastructure-as-code (Bicep)
• ▹Strong communication and interpersonal skills to translate operational SOC needs into engineering strategies
• ▹Open, approachable mindset and ability to act as a technical reference for customers and colleagues

Soft skills

About the company

NVISO protects European society against cyber attacks by offering cybersecurity services to private and government organizations, helping them prepare for, prevent, detect and respond to security incidents. Its values are: Proud, Break Barriers, Care and No BS.