Senior Cyber Defense Engineer - Remote/Hybrid

BOYLE Sports; Dundalk; Ibrido; EUR 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

BOYLE Sports is seeking a Senior Cyber Security Engineer to join the Cyber Defence team in Dundalk or Ireland Remote. You will build, tune and operate detections, run hunts, and investigate alerts escalated by the MSSP, acting as a bridge during incidents.

This role focuses on defensive capability, with automation, integrations and tooling to prevent attacks. You will lead detection engineering, threat hunting, incident response, and automation efforts, collaborating with platform,

Competenze

• Hands-on SOC role experience (senior/tier 3) with detections written, hunts led, and incidents handled.
• Strong knowledge of at least one major SIEM/XDR platform and their query languages; Cortex XDR/XSIAM ideal.
• Experience investigating in AWS: CloudTrail, GuardDuty, logs, IAM analysis; JSON familiarity.
• Scripting in Python to parse evidence, build SOAR steps and small tools.

Mansioni

• Design, write, test and tune detections across Cortex XDR/XSIAM and cloud/endpoints.
• Lead threat hunts and investigations; document findings for long-term accessibility.
• Stand on the bridge during P1/P2 incidents; drive containment and remediation with cross-team coordination.
• Build and maintain SOAR playbooks; automate triage, enrichment, and notification.
• Interface with Palo Alto MSSP; review detections and run exercises to validate coverage.
• Run purple-team exercises and validate detection coverage with breach-sim tooling.

Conoscenze

SOC analyst

SIEM/XDR

Palo Alto Cortex XDR/XSIAM

AWS CloudTrail/GuardDuty

Python scripting

MITRE ATT&CK

Incident Commander

Formazione

Relevant degree welcome

Cybersecurity certifications (GCIA, GCIH, GCFA, GNFA, BTL1)

Strumenti

AWS

XDR tooling

Descrizione del lavoro

BOYLE Sports is seeking a Senior Cyber Security Engineer to join the Cyber Defence team in Dundalk or Ireland Remote. You will build, tune and operate detections, run hunts, and investigate alerts escalated by the MSSP, acting as a bridge during incidents.

This role focuses on defensive capability, with automation, integrations and tooling to prevent attacks. You will lead detection engineering, threat hunting, incident response, and automation efforts, collaborating with platform,