Cyber Operations Engineer

We are seeking a skilled Cyber Operations Engineer to join our dynamic team and contribute to our mission of safeguarding our customers critical information. The role will support the Acora SOC workbench building and maintaining both our tooling and integrations critical to the operations we provide to our customers. Working within a skilled team your input and experience will help build on our existing capabilities, adjusting to the threat landscape and needs of our customers. Role Responsibilities Security Information and Event Management (SIEM)

• Deployment, maintenance and management of SIEM solutions
• Collaborate in the development and management of correlation rules for SIEM and EDR platforms
• Experience working with YARA-L desirable
• Previous security experience and knowledge on rule tuning
• Dashboard creation, previous experience of Looker is desirable
• Support log ingestion to SIEM
Security Orchestration, Automation, and Response (SOAR)
• Maintenance and support of SOAR
• Development and management of Playbooks, Connectors, Automated Job, integrations and custom views
• Experience with Python for integrations/Playbook actions; HTML, JS, CSS for custom views
• Experience working with APIs
• Creation of documentation on generation of required keys and permissions for integrations
• User account management
• Testing out-of-the-box integrations new or updated in development environment
Endpoint Detection and Response (EDR)
• Develop, deploy and manage correlation rules for EDRs
• Understanding of the technology
• Automation and playbooks from SOAR
Coding
• Creation of scripts and queries to support SOC to include reporting, customer queries and analyst support -utilising Python and BigQuery
• Troubleshooting products on behalf of vendors, ️ Screening call: Phone call with our recruitment team to assess your suitability for the role, but also if the role is right for you.
First interview: Video call over MS Teams with the Hiring Manager Final interview: Video call with the Hiring Manager and a team member from Cyber Security #1 BE THE BEST YOU CAN BE We challenge ourselves to raise our game each day. By embracing a mindset of growth, we continuously strive to improve ourselves, our ways of working, and the service we deliver to our customers. #2 WE DO WHAT WE SAY When we make a promise, we follow-through - no excuses. We don't leave anyone hanging or walk away from challenges. Reliable and focused, we value clear communication to build trust and give customers, and colleagues, the confidence they can count on us every time. #3 TOGETHER WE WIN Business is the biggest team sport of them all. By communicating well, breaking down silos and staying aligned, we create clarity and focus.Strong relationships, shared goals and commitment make us a winning team - for each other and for our customers. How to become an Acoran . . . If you would like to be considered for this position and want to be part of a growing & innovative company . . . Click "apply" now. To be considered for this position, you must have full rights to work in the UK. Equal Opportunities at Acora Acora is an equal opportunity employer, committed to providing equal opportunities regardless of race or ethnic origin, gender identity, family situation, sexual orientation, disability, religion or age. We hire our people on the basis of qualifications, merit, skills, and business need. We are a Level 1 Disability Confident Committed Employer and will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request any reasonable adjustments. Join us at Acora in creating a workplace where everyone can succeed and make an impact. We look forward to welcoming you to our team


• SIEM and SOAR experience along with coding knowledge is required along with a good security understanding considerations to rule and playbook tuning
• Proven experience in SIEM, SOAR, EDR, and other security technologies
• Previous experience and familiarity with SOC environment
• Strong coding skills in languages such as Python, BigQuery, or similar
• Experience with API development and integration
• Bachelor's degree in computer science, Information Security, or a related field
• Experience with cloud security platforms
• Familiar with development of playbooks and detection rules
• Knowledge of security best practices and frameworks
• Excellent problem-solving and analytical skills.