Senior Cyber Intelligence & Operation Engineer

Build a great career with SOCRadar

SOCRadar is poised for continued success with a relentless focus on innovation, global expansion, and feature-rich multifunctionality. Our mission is to empower organizations to stay ahead of evolving cyber threats. Enterprises around the world are increasingly selecting SOCRadar to achieve proactive security by understanding their attack surface and gaining automation-enabled visibility into surface, deep, and dark web. SOCRadar users leverage our expertise and investment in scalable, innovative Extended Threat Intelligence (XTI) solutions to protect their most valuable assets: brand reputation, employees, customers, and overall business operations.

What will Senior Cyber Intelligence and Operations Engineer do

Senior Cyber Intelligence and Operations Engineer specializing in threat intelligence enablement, delivering end-to-end technical solutions that help customers achieve accurate, noise-free security monitoring while maximizing platform adoption and retention through automation, custom tooling, and proactive intelligence services.

Core Service Areas:

1. Technical Onboarding & Configuration
   
   1. Audit and fine-tune customer digital footprints for comprehensive threat surface coverage
      
   2. Configure and optimize alert rules, detection logic, and DRP (Digital Risk Protection) settings
      
   3. Design custom monitoring parameters tailored to customer risk profiles and industry requirements
      
   4. Advise customers on security best practices and platform optimization strategies
      
   5. Ensure accurate, noise-free monitoring from day one through meticulous configuration management
      
   6. Develop and deliver technical onboarding documentation and configuration guides
      
2. Professional Services & Intelligence Delivery
   
   1. Enhanced Alert Synthesis: Aggregate, correlate, and contextualize security alerts across multiple sources
      
   2. Managed Intelligence Services: Provide continuous threat monitoring and analysis as an extension of customer SOC teams
      
   3. Deep-Dive Analyses: Conduct comprehensive investigations into complex threats, incidents, and adversary campaigns
      
   4. Digital Footprint Enrichment: Expand and refine monitored assets through reconnaissance and discovery techniques
      
   5. VIP Analysis: Deliver executive protection intelligence and targeted threat assessments for high-value individuals
      
   6. Adaptive Threat Reports: Generate customized intelligence products that evolve with changing threat landscapes and customer needs
      
3. Customer Retention & Success
   
   1. Track and analyze platform adoption metrics, user engagement patterns, and feature utilization rates
      
   2. Monitor customer satisfaction indicators and alarm quality metrics to identify risks proactively
      
   3. Surface potential churn risks early through data-driven analysis of usage and satisfaction trends
      
   4. Drive continuous engagement through proactive outreach, optimization recommendations, and value demonstrations
      
   5. Strengthen customer defenses before issues impact renewal through preventive tuning and enhancement
      
   6. Develop retention strategies based on customer behavior analytics and feedback loops
      

AI and Automation Tasks:

1. Scripting & Development
   
   1. Develop custom scripts in Python, PowerShell, Bash, and other languages to automate security workflows
      
   2. Create data parsing, transformation, and enrichment tools for threat intelligence processing
      
   3. Build integrations between security platforms, SIEM systems, and third-party tools
      
   4. Design API wrappers and connectors for seamless data exchange and automation
      
2. AI Agent Creation
   
   1. Design and implement AI-powered agents for automated threat analysis and triage
      
   2. Develop machine learning models for alert prioritization and anomaly detection
      
   3. Create intelligent chatbots and virtual analysts to enhance customer self-service capabilities
      
   4. Build LLM-based tools for natural language processing of security data and report generation
      
3. Automation Systems Development
   
   1. Architect end-to-end automation processes for security operations workflows
      
   2. Design SOAR (Security Orchestration, Automation and Response) playbooks and integrations
      
   3. Develop automated reporting, notification, and escalation systems
      
   4. Create self-healing mechanisms and adaptive response systems
      
   5. Build continuous monitoring and optimization automation for customer environments
      

Key Deliverables:

• Fully optimized customer environments with minimal false positives and comprehensive coverage
  
• Custom-developed scripts, tools, and automation solutions tailored to customer requirements
  
• AI-powered agents and intelligent systems that enhance operational efficiency
  
• Regular threat intelligence reports and strategic security recommendations
  
• Proactive customer engagement strategies that drive retention and platform value
  
• Documented best practices, configuration standards, and technical guides