Cyber Security Engineer

The SOC Security Engineer plays a key role in supporting the technical operations of the Security Operations Center (SOC). This position focuses on onboarding and integrating security platforms, maintaining and improving SOC monitoring and response tools, and supporting security investigations and incident response activities.The role requires strong technical expertise in security monitoring technologies, cloud security services, and automation, while collaborating with internal teams to continuously improve SOC detection capabilities and operational processes.
Responsibilities:

• Manage and implement technical customer onboarding and integrations with SOC platforms, including SIEM, Microsoft Azure, Defender, Splunk, and ITSM systems.
• Configure, maintain, and continuously improve SOC security tools, monitoring platforms, and related cloud security services.
• Apply technical expertise to implement and support core security technologies, including SIEM/SOAR platforms (Sentinel, Splunk), endpoint protection, and threat intelligence integrations.
• Support the handling of critical-severity incidents by providing technical input, assisting escalation decisions, and ensuring appropriate response and follow-up actions.
• Participate in threat hunting, threat intelligence, and security investigations, supporting incident response when required.
• Develop and improve detection logic and security monitoring capabilities within SOC platforms.
• Develop and maintain automations, integrations, and CI/CD pipelines to improve SOC detection and response efficiency.
• Identify and implement improvements to SOC tools, detection logic, and operational processes.
• Maintain clear and accurate documentation of technical solutions, configurations, and SOC procedures.
• Collaborate with cross-functional teams to support the implementation of security controls, procedures, and best practices.

Requirments:

• University degree or ongoing studies in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field preferred.
• Minimum 2–4 years of experience in cybersecurity or IT roles such as SOC Analyst, Security Engineer, System Administrator, Network Administrator, or similar positions.
• Experience analyzing security events using log data from systems such as SIEM, SOAR, firewalls, intrusion detection systems, endpoint tools, and network monitoring platforms.
• Hands-on experience with Microsoft Azure, Microsoft Entra ID (Azure AD), and cloud security concepts.
• Experience developing and tuning detection rules, onboarding log sources, and supporting security monitoring use cases within SOC platforms.
• Solid understanding of incident response and security monitoring workflows, including alert triage, investigation, and escalation procedures.
• Good knowledge of Windows and Linux administration and system hardening fundamentals.
• Understanding of networking fundamentals, TCP/IP, authentication mechanisms (MFA, SSO), and enterprise security principles.
• Scripting or automation skills (PowerShell, Python, or Bash) and experience working with APIs are considered an advantage.
• Proactive approach to staying current with cybersecurity threats, technologies, and industry best practices.
• Very good English language skills (minimum B2).

Certifications (considered an advantage)

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• CompTIA Security+ or CySA+
• CCNA, Splunk, or other relevant cybersecurity certifications

We offer:

• Monthly gross salary from 2600 to 4700 EUR, depending on your level of expertise.
• Hybrid way of working with cozy office space in the center of Riga, requiring at least three days per week on-site.
• Family-oriented company values and healthy attitude towards work and life balance - granting additional 4 vacation days, birthday leave, "Happy Land" space in the office for children, etc.
• Individual development and learning plan, including yearly budget for external training.
• Necessary essentials – health insurance with dental services and sports coverage.
• Possibility to work in mutual trust and positive team environment, to be creative, and improve workflow by self-initiatives.
• Friendly, multicultural, and cooperative colleagues.