{"id":2490391,"url":"https://alion.io/job/gc-soc-engineer","title":"SOC Engineer","company":{"id":61085,"name":"Georgian Card","domain":"gc.ge","url":"https://alion.io/company/gc-ge","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"HireHive","truth_index":null},"role":"Hardware","role_family":"Hardware","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tbilisi, Georgia"],"countries":["GE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":122000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":712},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-07-01T06:55:40Z","employer_posted_date":"2026-07-01","last_verified_at":"2026-10-14T11:39:35Z","board_verified":true,"closed_at":null,"days_open":105,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":104},"description":"JSC Georgian Card is looking for a SOC Engineer to join our team.\nAs the SOC Engineer at JSC Georgian Card, you will be responsible for the engineering, development, and continuous improvement of the technical content and platforms that power our Security Operations Center. You will design, implement, and tune detection content across SIEM, EDR, and other security tools, while also developing automated response playbooks. You will serve as the technical escalation point for our security analysts, analyzing complex incidents and translating lessons learned into improved defenses. If you are a proactive, analytical, and technically skilled professional dedicated to enhancing security detection and response, this position is for you.\nWhat you will do:\nDesign, develop, and maintain SIEM detection content, including correlation rules, queries, and dashboards.\n\nDevelop and tune detection content, custom indicators, and behavioral rules for EDR platforms.\n\nOnboard new log sources and security telemetry into the SIEM, ensuring data quality and normalization.\n\nDevelop, maintain, and automate incident response playbooks using the SOAR platform.\n\nContinuously tune detection content to reduce false-positive rates based on analyst feedback and incident analysis.\n\nServe as the primary technical escalation point for Tier 1 analysts on detection logic and platform issues.\n\nPerform in-depth investigations and root-cause analysis for escalated and complex security incidents.\n\nOperationalize threat intelligence by translating TTPs and IOCs into deployable detection content.\n\nDevelop and execute threat-hunting hypotheses across available telemetry and convert successful hunts into persistent detections.\n\nMaintain and improve SOC infrastructure, including SIEM, EDR, and SOAR platforms.\n\nDevelop and maintain technical documentation for detection logic, playbooks, and architecture.\n\nMentor Tier 1 analysts on investigative techniques and the operation of SOC tooling.\n\nParticipate in red-team and purple-team exercises to improve detection coverage.\n\nEnsure compliance with applicable information security standards (ISO 27001, NIST, PCI DSS).\n\nWhat you have:\nBachelor's degree in Computer Science, Information Security, IT, or a related field; or equivalent practical experience.\n\nMinimum 3 years of experience in cybersecurity operations or security engineering, with at least 1 year in a SOC environment.\n\nHands-on experience administering and developing content on an enterprise SIEM platform (e.g., Splunk, IBM QRadar, Microsoft Sentinel).\n\nPractical experience with EDR platforms (e.g., Palo Alto Cortex, Microsoft Defender for Endpoint, CrowdStrike Falcon).\n\nDemonstrated knowledge of the MITRE ATT&CK framework and the Cyber Kill Chain.\n\nWorking experience with SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR) and playbook development.\n\nScripting and automation proficiency in at least one language such as Python, PowerShell, or Bash.\n\nStrong understanding of Windows and Linux internals, Active Directory, and cloud platforms (Azure, AWS, GCP).\n\nWorking knowledge of network security technologies like firewalls, WAF, proxies, and VPNs.\n\nExperience with log management, including Syslog, Windows Event Forwarding, and data normalization.\n\nEnglish language proficiency for technical documentation, communication, and reporting.\n\nStrong engineering mindset, analytical and investigative aptitude, effective communication skills, self-directed work style, and a collaborative team orientation.\n\nPreferred:\nRelevant certifications such as GIAC (GCED, GCDA, GCIA), CompTIA CySA+, Microsoft SC-200, OffSec OSIR, or vendor-specific SIEM/EDR certifications.\n\nWhat we offer:\nInteresting and challenging job;\n\nCompetitive base salary, learning and developing opportunities.\n\nInterested? Please fill in the information, attach your CV and submit by clicking “apply for position now”. The deadline for submitting applications is 30 October, 2026.","description_format":"text","description_chars":3955,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Mining"],"lifecycle":[{"event":"open","at":"2026-10-14T02:01:14Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.267,"p_room":0.28,"age_days":104,"expected_fill_days":19,"reasons":["conf:4","win:tail","crowd:"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/gc-soc-engineer","json_url":"https://alion.io/job/gc-soc-engineer.json","meta":{"generated_at":"2026-10-14T12:02:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14553,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":61085},"rest":"https://alion.io/mcp/rest/get_company?id=61085"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgc-soc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgc-soc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgc-soc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gc-soc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgc-soc-engineer"}]}