Cyber Security Operations Engineer/...

Role Overview:

This contract opportunity is with a leading global healthcare and pharmaceutical services organization. As the Cyber Security Operations Engineer (also known as SOC Analyst or Hybrid), you will be pivotal in investigating and responding to security incidents, performing advanced threat hunting, tuning detection tools, and supporting critical SIEM, EDR, email security, and SOAR capabilities.

Key Responsibilities:

• CrowdStrike Falcon (EDR/XDR): 30% focus on detection, investigation, and response.
• Splunk SIEM: 25% dedicated to alert triage, correlation, and log analysis.
• Email Security Gateway: 15% focused on phishing investigations and email threat mitigation.
• Threat Hunting & MITRE ATT&CK: 10% aligned proactive hunting and analysis.
• Scripting & SOAR Playbooks: 10% development of detection rules and automation playbooks (Python/PowerShell/Bash).
• ServiceNow: 10% for incident documentation, ticketing, and management.

Hands-On Impact (65%):

You will actively investigate suspicious events, determine root causes, support major incident response efforts, conduct both proactive and reactive threat hunting, and recommend strategic changes to security controls and procedures.

Team Collaboration & Leadership (35%):

• Guide junior analysts in event monitoring best practices.
• Partner with cross-functional teams for business impact analysis.
• Lead IR exercises and drills to enhance organizational resilience.