SOC Engineer
About the job
The SOC Engineer (Threat Intelligence Platform) at CPX is responsible for managing and administering enterprise and open-source Threat Intelligence Platforms (TIPs) and their integration into SOC environments. This includes day-to-day operations, system optimization, configuration, ingestion of threat feeds, development of automation scripts, and performance monitoring. The role also involves collaborating with SOC teams to integrate TIPs with tools like SIEM, SOAR, EDR, and NDR, and customizing platforms through parsers, connectors, and APIs. Additional responsibilities include supporting threat intelligence analysts, maintaining detailed documentation, and ensuring alignment with organizational security goals. The position requires expertise in cloud platforms (AWS, Azure, Google Cloud), operating systems, scripting, network architecture, and containerization technologies such as Docker and Kubernetes. Strong communication and collaboration skills are essential.
