SOC Analyst — Cloud Security & Detection Engineer (Onsite)

CGI Group Inc.; Chippenham; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Insurance coverage

Medical benefits

Pension plan

Member Assistant Programme

Check4Cancer

Flexible time off

Share Purchase Plan

Member discounts

Dental benefits

Vision benefits

Profit Participation Plan

Health and Well-being Programme

Job summary

CGI Group Inc. in the United Kingdom is seeking a Security Data & Detection Engineer to join the SOC onboarding team. You will work with customers to design how security data is ingested into Elastic, focused on Oracle Cloud with exposure to AWS, Azure and Google Cloud.

You will develop detection logic, triage guidance and monitor alerts, supporting incidents and continuous improvement in a hands-on environment with senior cyber professionals.

Qualifications

• Bachelor's degree or equivalent in a cyber security, computer science or software discipline.
• Experience with SIEM technologies such as Elastic or Splunk is essential.
• Understanding of cyber security monitoring, alerts, incident triage or investigation is required.
• Knowledge of IT environments, Linux or other enterprise platforms is preferred.

Responsibilities

• Engineer & Deliver: Design and support security data ingestion pipelines into Elastic for new onboarded customers.
• Develop & Detect: Draft detection rules for defined cyber security use cases and create clear SOC triage guides.
• Engage & Onboard: Liaise with customers to gather data required for SOC onboarding.
• Monitor & Triage: Review security alerts, assess severity and impact.
• Investigate & Escalate: Support incident investigations and containment actions.
• Analyse & Respond: Monitor environments, investigate alerts and respond to incidents within SLAs.
• Learn & Improve: Research threats and share knowledge to improve processes.
• Support & Assure: Assist with investigations, testing, and first-line technical support.
• Operate & Automate: Ensure scheduled jobs and automation run reliably.

Skills

SIEM experience

Cloud security

Oracle Cloud

Linux/Enterprise OS

Analytical thinking

Communication skills

Customer engagement

Clear escalation

Cloud exposure (AWS/Azure/GCP)

Education

Bachelor's degree in Computer Science / Cyber Security

Tools

Elastic

Splunk

Linux

Job description

CGI Group Inc. in the United Kingdom is seeking a Security Data & Detection Engineer to join the SOC onboarding team. You will work with customers to design how security data is ingested into Elastic, focused on Oracle Cloud with exposure to AWS, Azure and Google Cloud.

You will develop detection logic, triage guidance and monitor alerts, supporting incidents and continuous improvement in a hands-on environment with senior cyber professionals.