SOC Engineer (DV Security Clearance)

at  CGI

The Space, Defence and Intelligence business unit in CGI is a true IT Systems Integrator. We work, build, and operate bespoke, technically complex, mission-critical systems which help our clients keep us all safe and secure. We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end-to-end cyber capability. We work collaboratively with global technology companies, cutting edge SMEs and academia to deliver the optimal solution for each client.
CGI was recognised in the Sunday Times Best Places to Work List 2024 and has been named one of the ‘World’s Best Employers’ by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.
Due to the nature of the role, all applicants must be Single UK national and currently hold SC Clearance (HLC is preferred) and must be willing to undergo vetting for Higher Level Clearance. This position requires onsite attendance in Gloucester.

YOUR FUTURE DUTIES AND RESPONSIBILITIES

Join our team as a SOC Engineer, where you will lead the deployment of Elastic in a private cloud environment based on VMware. Your role will encompass building, configuring, and testing security functions on the platform, integrating Elastic SIEM into the main SOC, and eventually monitoring the system

Key Responsibilities:

• Install and Configure: Deploy Elastic SIEM onto the platform.
• Testing and Compliance: Conduct comprehensive testing and refinement to ensure security compliance.
• Monitoring and Incident Resolution: Perform monitoring, analysis, and resolve incidents.
• Continuous Improvement: Enhance SOC configuration and automation.
• Rule Support: Develop new rules for emerging client scenarios and priorities.
• Testing and Assurance: Support broader test and assurance activities.
• Service Delivery: Demonstrate a strong track record in secure service delivery.
• Collaboration: Work effectively within a mixed client CGI team.
• Adaptability: Quickly learn and integrate new technologies.
• SIEM/SOAR Activities: Handle log gathering, event monitoring, and incident alerting.
• Information Assurance: Apply principles of information assurance.
• SIEM Configuration: Install and configure SIEM systems.

REQUIRED QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE

• Proven experience transitioning from project to service delivery.
• Hands-on experience with Elastic SIEM.
• Proficiency with VMware.
• Knowledge of vulnerability management tooling.