Soc Engineer

About the Role

DNEG's Information Security (InfoSec) program is establishing an internal Security Operations (SecOps) function to safeguard the confidentiality, integrity, and availability (CIA) of its data, client data, Personally Identifiable Information (PII), and systems. We are seeking a Security Operations Centre (SOC) Analyst to be a foundational member of this new team, directly contributing to the enhancement of our SecOps capabilities.

Key Responsibilities

• Collaborate closely with the SecOps Lead to ensure comprehensive monitoring, detection, investigation, and response to all security-related events.
• Address all Business As Usual (BAU) operational security queries and issues raised by peers and colleagues.
• Contribute to the development and refinement of security incident response processes and procedures.
• Work within a dynamic and technically diverse environment.
• Assist in enhancing and maturing existing InfoSec technologies utilized for the SecOps function.

Mandatory Job Requirements

The ideal candidate will possess a strong foundation in cybersecurity operations and a demonstrable ability to meet the majority of the following requirements:

Experience and Knowledge

• 3-5 years of experience working within a Security Operations Centre (SOC) capacity.
• Proven experience in cybersecurity operations, incident response (IR) management, processes, procedures, and investigations.
• Technical knowledge and practical application in the following areas:
  • Network Security: Firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Proxy Servers, Email and Web Content Filters.
  • Endpoint Protection (EPP): Anti-Virus/Malware Mitigation (signature and signatureless solutions).
  • Access Control: Concepts and application.
  • Data Loss Prevention (DLP) Solutions.
  • Operating Systems: MS Windows (Client and Server O/S), multiple LINUX distributions, Mac OSX.
  • Security Data Analytics and Reporting.
  • SIEM: Security Information and Event Management, including data aggregation and correlation.
• Excellent understanding and experience with identity management systems and processes, including awareness of current and emerging threats related to Identity and Access Management (IdAM).
• Working knowledge of vulnerability assurance management toolsets and services.
• Working experience with network and application penetration testing methodologies.
• Experience working within an ITIL framework and familiarity with IT ticketing systems.

Essential Attributes

• A strong team player with a positive and professional demeanor.
• Highly motivated with a forward-thinking and collaborative approach.

Desirable Knowledge and Experience

• Familiarity with Information Security frameworks such as ISO 27001:2013, PCI/DSS, CIS, and NIST.
• Experience with mobile operating systems (iOS, Android) and security controls like Mobile Device Management (MDM) and Mobile Application Management (MAM).
• Knowledge of Bring Your Own Device (BYOD) and remote working security considerations.
• Experience with Cloud Security concepts, especially SaaS and PaaS, and their application.
• Knowledge of privacy compliance and frameworks (e.g., GDPR) and their relevance to SecOps.