This job might no longer be available.

Senior SOC Engineer - 12 month FTC

Job Summary:

The Senior SOC Engineer role is key within our Security Operations Centre (SOC) team, working closely with our security analysts and incident responders to manage, maintain and support our monitoring and response platforms. The role is aimed at candidates with strong knowledge and experience of Security Information and Event Management (SIEM) or Security Analytics platforms and their associated on-boarding, support and maintenance practices. The successful candidate will apply their skills and expertise to maintain and improve our visibility and help ensure effective detections and alerts are in place. The role offers the opportunity to further develop a career in Cyber Security in an exciting, fast-moving industry.

Requirements

Key Deliverables:

• Lead the overall management, administration and support of our SIEM platform, including;
  • General infrastructure and system administration
  • System support and troubleshooting
  • User access management and role definition, etc.

• On-board, maintain and manage security log sources for our SIEM platform, including;
  • Agent and policy deployment and maintenance
  • Creation and maintenance of ingest pipelines (i.e., data parsing, including data mapping for aggregation and common schema, etc.)
  • Index template and pattern creation and maintenance (i.e., data type mapping)

• Maintain and troubleshoot security detections and alerts within our SIEM platform, including;
  • Creation and maintenance of detection engine rules (including ML, threshold, correlation and indicator-match based, etc.)
  • Detection rule tuning and exception management

• Lead the overall management and administration of our Incident Response (IR) environment, including;
  • General infrastructure and system administration
  • User access management and role definition, etc.
  • Security Orchestration, Automation and Response (SOAR) tooling
  • Security indicator collection, storage, distribution and sharing, etc.
  • Deployment and maintenance of future SOC tooling (both commercial and open-source), including outside of the IR environment.

• Proactively suggest improvements to SOC infrastructure, tooling and processes, increasing visibility and improving efficiency.

• Use your expertise to assist wider areas of our Cyber Security programme - helping secure our games and setting our standards for security.

• Communicate effectively with various Square Enix teams and studios balancing security requirements with their business needs.

Knowledge & Experience:

The role would suit anyone with prior senior experience in a hands-on SIEM or SOC Engineering, Security Engineering or equivalent role (e.g., Detections Lead, etc.) within a security operations environment.

• Strong experience working with Security Information and Event Management (SIEM) or Security Analytics platforms. Specific experience with Elastic Security is highly desirable.
• Strong experience working with Google Cloud Platform (GCP) or similar Cloud infrastructure platforms.
• Experience with creating, maintaining and working securely within Incident Response (IR) environments. Specific experience with SOAR platforms or technologies is highly desirable.
• Thorough grasp of common security principles and practices with the ability to apply these to a range of technologies and information systems.
• Adept at learning and understanding new technologies quickly.
• Ability to converse confidently across security domains such as identity and access management, network security, cryptography and configuration management.
• Natural inclination to communicate complex technical concepts in simple diagrams, blueprints and solution definitions.

Competencies, Skills & Attributes:

Other:

• An interest in emerging technologies or technical innovations.
• A focus on self-development and career progression.
• A passion for video games is highly desirable.

Our goal at Square Enix is to hire, retain, develop and promote the best talent, regardless of age, gender, race, religious, belief, sexual orientation or physical ability.

Our pledge to D&I

At Square Enix we believe in the importance of being a diverse and global company, and we stand firmly together against any forms of injustice, intolerance, harassment or discrimination. In our effort to create a truly diverse workforce, we pledge to continue to raise awareness in every step of the employee experience, from recruitment to promotions to ensure equal opportunities for all. One of our goals is to champion diversity in games and at work and work together to inspire real change.

Learning and education around D&I will be a key element for us to continue to grow as an organization. With unconscious bias training, D&I workshops and a variety of initiatives to give our employees the opportunity to be heard and be part of that change to achieve real equality. We need all our efforts to continue to build our culture of inclusion and equality.

We are also proud to partner with UKIE's Raise the Game pledge, BAME in Games and Women in Games, to name a few.

Covid-19 remote working

Square Enix are committed to keeping our employees safe. We are listening closely to government guidelines, and this role will be based remotely until the company sees fit to return to the office. This role will be based in our Blackfriars Studio in London, upon return.