Senior SOC Engineer - Onsite Incident Response

Amaris Consulting; Fatih; Presencial; TRY 300.000 - 540.000; Tempo integral

Resumo da vaga

Amaris Consulting in Turkey is seeking an L3 Security Operations Specialist to join our cybersecurity operations team. You will handle complex escalations related to SIEM, EDR, NDR and XDR platforms, investigate security incidents, troubleshoot product issues and improve detection rules.

The role requires hands-on experience with at least one SIEM (e.g., IBM QRadar, Logsign or Graylog), familiarity with MITRE ATT&CK and Cyber Kill Chain, and strong English communication for documentation and

Qualificações

• 2+ years of experience in cybersecurity operations, SOC, or incident response.
• Hands-on with at least one SIEM such as QRadar, Logsign, or Graylog.
• Experience with EDR, NDR or XDR technologies.
• Knowledge of detection rules, correlation use cases and false positive analysis.
• English reading/writing and ability to read technical docs.

Responsabilidades

• Handle L3 escalations related to SIEM, EDR, NDR and XDR platforms.
• Investigate security events and identify root causes.
• Troubleshoot configuration, integration, correlation and alerting issues.
• Create, test and maintain detection rules and use cases.
• Map detection rules to MITRE ATT&CK and Cyber Kill Chain.
• Review false positives and improve alert quality.
• Support Incident Response and DFIR activities.
• Perform threat hunting and document findings.
• Collaborate with SOC, Threat Intelligence, Infra and Security teams.
• Provide guidance to L1/L2 support.

Conhecimentos

Cybersecurity operations

SOC

Incident Response

Troubleshooting

Detection rules

MITRE ATT&CK

English communication

Documentation

Root cause analysis

Ferramentas

IBM QRadar

Logsign

Graylog

Cortex XDR

Carbon Black

Microsoft 365 Defender

Vectra

Attivo

SOAR platforms

Fortinet

Cisco Security

Descrição da vaga

Amaris Consulting in Turkey is seeking an L3 Security Operations Specialist to join our cybersecurity operations team. You will handle complex escalations related to SIEM, EDR, NDR and XDR platforms, investigate security incidents, troubleshoot product issues and improve detection rules.

The role requires hands-on experience with at least one SIEM (e.g., IBM QRadar, Logsign or Graylog), familiarity with MITRE ATT&CK and Cyber Kill Chain, and strong English communication for documentation and