Security Operations Centre Specialist (SOC)
SkillOnNet is seeking a highly skilled and proactive Security Operations Centre Specialist (SOC) to manage and enhance the organisation's security monitoring, detection, and response capabilities. As a successful candidate, the specialist will be responsible for the day-to-day operation, administration, and optimisation of SIEM and EDR platforms, proactive threat hunting, security event monitoring, incident investigation, and continuous improvement of detection capabilities.
The role requires hands-on experience in configuring and managing security monitoring tools, developing correlation rules and detection use cases, and implementing automated response and blocking mechanisms. The specialist will review security logs and ensure that security operations align with regulatory and compliance requirements, including ISO 27001 and PCI DSS.
- Monitor SIEM tools for alerts, incidents, and anomalies in real-time.
- Triage, investigate, and respond to security incidents following established playbooks.
- Correlate data across systems to identify potential threats or breaches.
- Create and maintain incident reports and dashboards.
- Create, review and improve incident playbooks.
- Conduct proactive threat hunting based on threat intelligence and hypotheses.
- Analyze endpoint, network, and log data to detect stealthy or advanced threats.
- Develop detection rules and logic for SIEM, EDR, and other monitoring tools.
- Maintain threat intelligence feeds and indicators of compromise (IOCs).
- Perform internal and external penetration tests on networks, applications, and systems.
- Simulate real-world attack scenarios to identify vulnerabilities and misconfigurations.
- Provide detailed technical reports and recommendations for remediation.
- Maintain proficiency with common offensive tools and frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite).
- Monitor, investigate, and respond to security alerts and incidents generated by SIEM, EDR, and other security technologies.
- Administer, manage, and optimize SIEM and EDR platform.
- Perform continuous security event monitoring and analysis.
- Triage, investigate, contain, eradicate, and support recovery activities for security incidents.
- Analyse security events and identify indicators of compromise (IOCs) and suspicious activities.
- Participate in incident response activities, root cause analysis, and post-incident reviews.
- Produce incident reports, dashboards, metrics, and executive summaries.
- Configure and onboard log sources from servers, endpoints, network devices, cloud services, and security solutions.
- Develop, tune, and maintain detection use cases and correlation rules.
- Ensure log collection, retention, integrity, and availability requirements are met.
- Conduct endpoint investigations and forensic analysis where required.
- Monitor endpoint security posture and identify suspicious activities.
- Conduct proactive threat hunting activities using endpoint, network, and log data.
- Review and analyse logs from security and infrastructure systems.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). (required)
- Minimum 3-5 years of experience in Security Operations, SOC, Incident Response, Threat Hunting, or Security Monitoring roles. (required)
- Hands-on experience managing SIEM platforms. (required)
- Hands-on experience managing EDR solutions. (required)
- Strong understanding of log analysis, threat detection methodologies, and incident response processes. (required)
- Familiarity with ISO 27001 and PCI DSS security monitoring requirements. (required)
- Experience with scripting and automation (PowerShell, Python, KQL, SPL, etc.). (nice-to-have)
- Strong analytical and investigative mindset. (required)
- Excellent troubleshooting and problem-solving abilities. (required)
- Ability to work independently and manage multiple priorities. (required)
- Strong written and verbal communication skills. (required)
- Ability to communicate technical findings to both technical and non-technical stakeholders. (required)
- Attention to detail and commitment to continuous improvement. (required)
- Collaborates well with colleagues and contributes to a positive team environment. (required)
- Shares knowledge and resources, supports and helps team members. (required)
- Excellent work environment
- Monetary vouchers on Birthdays and other special occasion
- Fully equipped kitchen and in-house entertaining space
- Eligibility to enrol in Company's medical insurance plan
- Eligibility to enrol in Company's pension plan
- Exciting company activities including monthly lunches, corporate gatherings, an intercompany football team, competitions, and many other activities
- Casual dress code
- A chance to advance professionally inside one of the world's largest iGaming organisations
SkillOnNet is a leading online casino software and platform provider, offering customisable casino platforms with an extensive range of games. With significant industry experience, it delivers quality and technical expertise to operators looking to launch and run online casinos. Its customisable packages are designed for stability, scalability and fast deployment to meet varying operator needs. SkillOnNet is headquartered in Sliema, Malta, and also operates its own portfolio of casino brands.