About the role

Blackwater Defence operates a 24/7 security operations centre for enterprise clients.

What you'll do

• Monitor and triage alerts in the SIEM

• Investigate incidents and escalate as needed

• Tune detection rules to reduce noise

• Document incident timelines

What we're looking for

• 1+ year in a SOC or security operations role

• Familiarity with Splunk or Elastic

• Understanding of MITRE ATT&CK

• Willing to work rotating shifts