Cloud SOC Analyst: Detection & Data Pipelines

CGI Group Inc.; Devizes; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Share scheme

Job summary

CGI Group Inc. in the UK is seeking a security data and detection engineer to join the Data and Detection Engineering team.

You will onboard new customers into the Security Operations Centre, design how security data is ingested into Elastic, and develop detection logic for Oracle Cloud with exposure to AWS, Azure and Google Cloud. You’ll contribute to day-to-day security monitoring, triage guidance, and incident investigations, with growth opportunities across cloud security, SIEM and threat

Qualifications

• Technical background in cyber security or related field.
• Experience with SIEM technologies like Elastic or Splunk.
• Knowledge of cloud security across major platforms.

Responsibilities

• Engineer & Deliver: Design and support security data ingestion pipelines.
• Develop & Detect: Draft detection rules and SOC triage guides.
• Engage & Onboard: Gather customer requirements for SOC onboarding.
• Monitor & Triage: Assess security alerts and escalate where needed.
• Investigate & Escalate: Support incident investigations and containment actions.
• Analyze & Respond: Monitor environments and respond to incidents.
• Learn & Improve: Research threats and share knowledge for improvement.
• Support & Assure: Provide first-line technical support and testing.
• Operate & Automate: Ensure scheduled jobs and automation run reliably.

Skills

SIEM fundamentals

Elastic

Splunk

Cloud security

Customer engagement

Incident triage

Threat detection

Data ingestion design

Education

Computer Science

Cyber Security

Software Engineering

Digital Forensics

Tools

Elastic

Splunk

AWS

Azure

Google Cloud

Job description

CGI Group Inc. in the UK is seeking a security data and detection engineer to join the Data and Detection Engineering team.

You will onboard new customers into the Security Operations Centre, design how security data is ingested into Elastic, and develop detection logic for Oracle Cloud with exposure to AWS, Azure and Google Cloud. You’ll contribute to day-to-day security monitoring, triage guidance, and incident investigations, with growth opportunities across cloud security, SIEM and threat