Security Engineer

at  Capgemini

ABOUT THE JOB YOU ARE CONSIDERING

With incidents of cyber-crime frequently in the news, our clients are increasing conscious of the need to protect their systems and data. Our Protective Monitoring service allows our customers to monitor, detect and respond to cyber threats and safeguard their valuable assets, ensuring peace of mind in an increasingly digital landscape.
Successful candidates will leverage their existing experience with monitoring technologies, predominantly SIEM systems and security automation tools, to enhance our cybersecurity measures. This role offers the opportunity to further develop and apply advanced skills and expertise in a rapidly evolving field, contributing to our proactive defence strategies. The team consists of 6+ engineers working closely with the wider monitoring teams including 24*7 shift teams.
Successful applicants will have the chance to gain hands on experience of monitoring technologies, predominately SIEM systems and security automation tools, providing invaluable skills and expertise in the rapidly evolving field of cybersecurity.
Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time.

YOUR SKILLS AND EXPERIENCE

• Professional experience in SOC tooling such as SIEM and Endpoint services (Splunk, Microsoft Sentinel, Defender for Endpoint etc)
• Relevant industry certifications (e.g., AZ500, Splunk ES Admin)
• Strong analytical and problem-solving skills
• Knowledge of security best practices and concepts
• Strong understanding of network and endpoint security, firewalls, intrusion detection/prevention systems (IDS/IPS).

SOC Engineers play a critical role in maintaining security platforms and managing infrastructure and tools. They are experienced professionals with hands-on technical experience in security engineering including the following:

• Security Platform Management: Oversee the deployment, configuration, and ongoing optimization of security platforms to ensure accurate and efficient event collection, licensing, correlation, and alerting.
• Configure and Troubleshoot: Handle the configuration and troubleshooting of client security infrastructure devices, including SIEM systems and other XDR components.
• Optimize Detection Accuracy, Trend Analysis and Fine-Tuning: Tune system rules and correlation searches to enhance detection capabilities. Perform trend analysis to help fine-tune alerts, policies, and configurations, minimising false positives and improving detection accuracy.
• Develop Automation and Efficiencies: Leverage your knowledge and experience to develop automation processes, enhance efficiencies, and implement best practices.

You can bring your whole self to work. At Capgemini, striving for equity, diversity and inclusion is part of everyday life, and will be part of your working reality. We have built an inclusive and welcoming environment, for everyone.