SOC Engineer | Managed Services Operations

PwC Polska; Lublin; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work

Mentoring

Training workshops

Medical care package

Wellbeing program

Employee perks

Job summary

PwC Polska is seeking a SOC Engineer to maintain and improve SIEM/EDR/XDR platforms within our Cyber Security practice. The role involves onboarding log sources, integrating tools, troubleshooting data ingestion, and developing automation to boost service quality.

You will work with SOC analysts and client teams to enhance detection, create monitoring use cases, and document procedures, with a hybrid working model and strong emphasis on collaboration.

Qualifications

• 3+ years of experience in cybersecurity, cloud engineering or systems administration.
• IT or technical education preferred.
• Familiarity with cloud platforms such as Azure, AWS or Google Cloud.
• Basic scripting or automation skills (Python, PowerShell or similar).
• Knowledge of Windows, Linux and networking fundamentals.
• Strong analytical and problem-solving skills.
• Basic understanding of Infrastructure-as-Code and DevOps tooling (Terraform, GitHub, GitHub Actions, Azure DevOps).
• Polish language skills at a minimum C1 level.
• English language skills at B2 level or higher.

Responsibilities

• Maintain and improve SIEM, EDR/XDR and related security monitoring platforms supporting managed SOC services.
• Onboard and integrate new log sources, security tools and monitored environments.
• Troubleshoot platform, integration and data-ingestion issues.
• Develop automation and operational improvements that enhance service quality and efficiency.
• Support implementation of monitoring use cases, reports and dashboards.
• Work closely with SOC analysts to address operational challenges and improve detection capabilities.
• Support onboarding of new managed services customers.
• Prepare and maintain technical documentation.
• Collaborate with client technical teams and technology vendors.
• Contribute to continuous improvement of Threat Detection and Response services.

Skills

Cybersecurity

Cloud engineering

Systems administration

Analytical skills

Problem-solving

DevOps tooling knowledge

Education

IT or technical education

Tools

Terraform

GitHub

GitHub Actions

Azure DevOps

Job description

A career in our Cyber Security practice, within Risk Assurance Compliance and Analytics services, will provide you with the opportunity to assist clients in developing analytics and technology solutions that help them detect, monitor, and predict risk.

Our team helps business leaders protect and manage their risk related to information regarding technology, people, systems, processes, culture, and physical surroundings. We help clients’ understand their current capability and develop a plan to target cyber security investment, helping to respond to actual cyber incidents, and advising on legal issues related to breaches, data privacy, and protection.

SOC Engineer

Your future role:

• Maintain and improve SIEM, EDR/XDR and related security monitoring platforms supporting managed SOC services.
• Onboard and integrate new log sources, security tools and monitored environments.
• Troubleshoot platform, integration and data-ingestion issues.
• Develop automation and operational improvements that enhance service quality and efficiency.
• Support implementation of monitoring use cases, reports and dashboards.
• Work closely with SOC analysts to address operational challenges and improve detection capabilities.
• Support onboarding of new managed services customers.
• Prepare and maintain technical documentation.
• Collaborate with client technical teams and technology vendors.
• Contribute to continuous improvement of Threat Detection and Response services.

Apply if you have:

• 3+ years of experience in cybersecurity, cloud engineering or systems administration.
• IT or technical education,
• Familiarity with cloud platforms such as Azure, AWS or Google Cloud.
• Basic scripting or automation skills (Python, PowerShell or similar).
• Knowledge of Windows, Linux and networking fundamentals.
• Strong analytical and problem-solving skills.
• Basic understanding of Infrastructure-as-Code and DevOps tooling such as Terraform, GitHub, GitHub Actions, Azure DevOps or similar platforms.
• Polish language skills at a minimum C1 level.
• English language skills at B2 level or higher.

Nice to have:

• German language skills at B2 level or higher,
• Hands-on experience with SIEM, EDR/XDR or security monitoring technologies.
• Familiarity with SOC processes and security incident management,
• Experience in a coordination, service management or similar client-facing role,
• Industry-recognized certifications,
• Hands-on information security skills, with a focus on system and log analysis, network security, or Windows and Linux administration.

By joining us you gain:

• Work flexibility - hybrid working model, workation, sabbatical leave,
• Development and upskilling - our full support during onboarding process, mentoring from experienced colleagues, training sessions, workshops, and conversations with native speaker,
• Medical and wellbeing program - medical care package, mindfulness, psychological support, education through dedicated webinars and workshops, financial and legal counseling,
• Possibility to create your individual benefits package (a.o. lunch pass, concierge, veterinary package for a pet, massages) and access to a cafeteria - vouchers, discounts on IT equipment and car purchase,
• 3 paid hours for volunteering per month,
• Additional paid Birthday Day off,
• And when you start enjoying PwC as much as we do, you may recommend your friend to work with us.