Proton
Senior Machine Learning Engineer (SOC) (m/w/x)
Vollzeitnur vor OrtSenior
Genf, Zürich
ab 46.000 - 74.000 / Jahr
Neuer Job?Nejo!
Dein persönlicher KI-Karriere-Agent
Nejo KI-Zusammenfassung
Leading a distributed 4-person SOC team for a global energy trader, ensuring 24/7 coverage and defining operating procedures. Demonstrated experience managing remote SOC personnel required. Focus on Microsoft Sentinel (KQL) and building detection/response capabilities.
Deine Match-Analyse
von deinem Karriere-Agenten
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- 4+ years progressive experience in cybersecurity operations, incident response, or security engineering
- Experience leading or managing a SOC team, including remote/distributed personnel
- Strong understanding of SOC operating models
- Proven track record of building or improving detection and response capabilities
- SIEM & Analytics: Microsoft Sentinel (KQL), log source onboarding, analytics rule development, workbook/dashboard creation
- Endpoint Security: Microsoft Defender for Endpoint (MDE), CrowdStrike Falcon (EDR/XDR)
- Cloud Security: AWS (GuardDuty, CloudTrail, Security Hub) and Microsoft Azure (Defender for Cloud, Entra ID Protection); Wiz for CSPM
- Data Security & DLP: Microsoft Purview (DLP, Information Protection, Insider Risk), Varonis
- Network & Web Security: Zscaler (ZIA/ZPA), Palo Alto Networks (NGFW, Panorama, Cortex)
- Incident Response: Digital forensics fundamentals, malware analysis, memory/disk acquisition, chain-of-custody practices
- Frameworks: MITRE ATT&CK, NIST CSF, NIST 800-61
- Excellent communication and stakeholder management skills
- Strong organisational and project-management abilities
- Analytical mindset with attention to detail
- Industry certifications: CISSP, CISM, GCIH, GCIA, GCED, SC-200, AZ-500, or equivalent
- Experience in commodity trading, energy, or financial services sector
- Familiarity with automation and orchestration (SOAR) platforms, scripting (Python, PowerShell, KQL)
- Experience with threat hunting methodologies and tools
- French language skills (advantageous)
- Periodic travel between Geneva and London offices; occasional travel to Singapore and Houston
Aufgaben
- Lead a distributed team of 4 SOC analysts/engineers
- Ensure 24/7 SOC coverage and consistent service quality
- Define and enforce SOC operating procedures and escalation paths
- Establish shift handover protocols and performance metrics
- Report on SOC performance, threat trends, and risk posture
- Manage the external SOC provider relationship and service performance
- Drive continuous improvement with the outsourced SOC provider
- Develop, tune, and maintain analytics rules in Microsoft Sentinel
- Develop, tune, and maintain correlation logic in Microsoft Sentinel
- Develop, tune, and maintain custom detections in Microsoft Sentinel
- Improve detection coverage mapped to MITRE ATT&CK
- Integrate threat intelligence feeds to enrich alerts
- Drive proactive threat hunting
- Lead triage for complex security incidents
- Lead investigation for complex security incidents
- Lead containment for complex security incidents
- Lead eradication for complex security incidents
- Lead recovery for complex security incidents
- Coordinate cross-functional incident response
- Conduct post-incident reviews
- Perform root-cause analysis for incidents
- Translate incident findings into detection improvements
- Translate incident findings into process updates
- Author SOC playbooks and runbooks
- Maintain SOC playbooks and runbooks
- Test SOC playbooks and runbooks
- Improve existing playbooks based on emerging threats
- Create new playbooks based on emerging threats
- Improve existing playbooks based on red team findings
- Create new playbooks based on red team findings
- Improve existing playbooks based on lessons learned
- Create new playbooks based on lessons learned
- Drive tabletop exercises to validate playbook effectiveness
- Drive purple-team simulations to validate playbook effectiveness
- Partner with the Red Team to translate emulation results
- Translate adversary emulation results into detection rules
- Translate adversary emulation results into response procedures
- Participate in purple-team exercises
- Validate detection coverage during purple-team exercises
- Tune alerts based on simulated attack paths
- Mentor SOC team members
- Develop SOC team members through training plans
- Conduct knowledge-sharing sessions with the SOC team
- Provide hands-on coaching to the SOC team
- Foster a culture of continuous improvement
- Foster professional growth across the distributed team
Berufserfahrung
4 Jahre
Ausbildung
Abgeschlossene BerufsausbildungODER
Bachelor-AbschlussODER
Master-Abschluss
Sprachen
Französisch – Grundkenntnisse
Tools & Technologien
Microsoft SentinelKQLMicrosoft Defender for EndpointCrowdStrike FalconAWSGuardDutyCloudTrailSecurity HubMicrosoft AzureDefender for CloudEntra ID ProtectionWizMicrosoft PurviewVaronisZscalerPalo Alto NetworksNGFWPanoramaCortexMITRE ATT&CK
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Vitol erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei VitolÜber das Unternehmen
VI
EnergyAutomationGenf
The company is a leader in energy and commodities, producing and delivering energy and commodities globally.
Wie gut ist dein Lebenslauf?
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Du hast noch keinen Lebenslauf?
Noch nicht perfekt?
- 100 Banque Lombard Odier & Cie SAIT Security Engineer - Cloud and Data Loss Prevention (DLP) (m/w/x)Vollzeitnur vor OrtKeine AngabeGenf
- SonarMajor Incident Manager (m/w/x)Vollzeitnur vor OrtBerufserfahrenGenf
- TOTSA TotalEnergies Trading SATech Lead – Advanced Analytics (m/w/x)Vollzeitnur vor OrtSeniorGenf
- PricewaterhouseCoopers AGManager / Senior Manager - Cyber Regulatory Strategy & Transformation (m/w/x)Vollzeitnur vor OrtSeniorGenf