{"id":4234867,"url":"https://alion.io/job/vertex-technologies-middle-security-operations-center-engineer-l2-2","title":"Middle Security Operations Center Engineer L2","company":{"id":3882190,"name":"Vertex Technologies","domain":"vertextech-eg.com","url":"https://alion.io/company/vertextech-eg","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cairo, Egypt"],"countries":["EG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ChatGPT","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Fine-tuning","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"GCP","optional":true},{"name":"Incident Management","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-11-13T11:40:00Z","employer_posted_date":null,"last_verified_at":"2026-11-13T11:40:00Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"We are looking for a Middle SOC Engineer (L1/L2) to join our team and provide advanced security monitoring, threat detection, and incident response for an enterprise client within a B2B environment. This role focuses on deep security triage, active incident investigation, and coordination of threat containment for international clients in English.\n\nThe position requires working in a 3-shift rotation (8 hours per shift) based on Cairo time:\nMorning Shift: 08:00 AM – 04:00 PM\n\nEvening Shift: 04:00 PM – 12:00 AM (Midnight)\n\nNight Shift: 12:00 AM – 08:00 AM\n\nWhat you'll be doingPerform real-time security monitoring, deep-dive analysis, and triage (L1/L2) of security alerts escalated from multiple sources (SIEM, EDR, firewalls, and system logs).\n\nLog, track, and manage complex security incidents through ticketing systems, driving them to resolution or coordinating escalations.\n\nAnalyze network traffic (PCAP), system logs (Windows/Linux), and endpoint behavior to track lateral movement and analyze malware delivery.\n\nCoordinate host isolation, credential revocation, and other immediate threat containment actions according to incident response playbooks.\n\nInvestigate multi-stage security incidents, draft detailed incident reports, and perform thorough root cause analysis (RCA).\n\nWork on fine-tuning SIEM correlation rules, security tool dashboards, and optimizing detection alerts to minimize false positives.\n\nDevelop, test, and automate incident response runbooks (playbooks) and response procedures.\n\nCommunicate technical incident findings clearly to international clients and internal stakeholders via email, chat, and online meetings.\n\nWhat We OfferOpportunity to work on large-scale, impactful projects\n\nClear career growth path within a team with 27+ years of experience\n\nProfessional, friendly, and supportive team environment\n\nEST time zone schedule with paid overtime when applicable (up to 12 hours per shift)\n\nModern office in the Smart Village district.\n\nFlexible and transparent compensation review system\n\nOvertime compensation options\n\nPrivate medical insurance after completing the probation period\n\nPayments in USD\n\nRequirements\nUpper-Intermediate to Advanced English (B2/C1, written and spoken) for daily client and internal communications.\n\nBachelor's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical industry experience.\n\n2 to 4 years of hands-on experience in a SOC, Security Operations Center, or active incident response role.\n\nSolid knowledge of operating systems (Windows and Linux administration, system logs) and core networking protocols (TCP/IP, DNS, HTTP/HTTPS, SSL/TLS).\n\nIn-depth familiarity with the MITRE ATT&CK framework, common attack vectors, and techniques used by threat actors.\n\nPractical experience working with SIEM platforms (such as Splunk, Microsoft Sentinel, or Elastic) and EDR/XDR solutions (such as CrowdStrike, SentinelOne, or Microsoft Defender).\n\nStrong practical skills in using AI tools (e.g., ChatGPT, Claude, Copilot), including effective prompting and applying AI in everyday work tasks.\n\nStrong analytical thinking, technical documentation skills, and the ability to work under high pressure during major security incidents.\n\nAvailability to work on an 8-hour rotational shift schedule, including night shifts, weekends, and holidays.\n\nNice to haveRelevant industry certifications (e.g., CompTIA CySA+, Blue Team Level 1/2, CEH, GCIH, or Microsoft Certified: Security Operations Analyst Associate).\n\nScripting and automation experience using Python, PowerShell, or Bash for security integrations and workflow optimization.\n\nFamiliarity with Cloud Security architecture (AWS, Azure, or GCP).\n\nExperience with Security Orchestration, Automation, and Response (SOAR) platforms and Threat Intelligence Platforms (TIP).\n\nExperience using ticketing and incident management tools like ServiceNow and JIRA.","description_format":"text","description_chars":3919,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-13T11:40:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["seen:0","win:early"],"computed_at":"2026-11-14T03:14:19Z"},"pay":null,"html_url":"https://alion.io/job/vertex-technologies-middle-security-operations-center-engineer-l2-2","json_url":"https://alion.io/job/vertex-technologies-middle-security-operations-center-engineer-l2-2.json","meta":{"generated_at":"2026-11-14T03:14:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4749,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3882190},"rest":"https://alion.io/mcp/rest/get_company?id=3882190"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvertex-technologies-middle-security-operations-center-engineer-l2-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvertex-technologies-middle-security-operations-center-engineer-l2-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvertex-technologies-middle-security-operations-center-engineer-l2-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vertex-technologies-middle-security-operations-center-engineer-l2-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvertex-technologies-middle-security-operations-center-engineer-l2-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4234867}},{"tool":"search_jobs","arguments":{"company":"vertextech-eg.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4234867},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}