SOC Engineer

About the role

Mobiz is seeking a mid‑level SOC Engineer to join its 24×7 Security Operations Center. You will monitor, investigate, and respond to security threats across managed client environments, working with Microsoft Sentinel, Defender XDR, and other detection tools.

Key responsibilities

• Monitor client security environments using Microsoft Sentinel and Defender XDR dashboards.
• Acknowledge, assess, and prioritize alerts within SLA windows, distinguishing true positives from false positives.
• Conduct end‑to‑end investigations, map behaviors to MITRE ATT&CK techniques, and determine blast radius.
• Execute containment and remediation actions such as host isolation, account disablement, token revocation, firewall rule deployment, and email quarantine.
• Escalate confirmed P1 incidents to the SOC Manager with a complete investigation package.

Required profile

• Mid‑level security operations practitioner with hands‑on experience in a SOC environment.
• Familiarity with incident response processes for ransomware, BEC, and identity compromise.
• Ability to work under direction of the SOC Manager and collaborate with a global team.

Required skills

• Microsoft Sentinel
• Microsoft Defender XDR
• SIEM and EDR platforms
• MITRE ATT&CK framework
• Alert triage and investigation
• Containment actions (host isolation, account disablement, token revocation, firewall rule deployment, email quarantine)

What we offer

• Opportunity to work on real‑world incident response engagements.
• Collaborative environment with highly talented professionals.
• Exposure to a broad portfolio of client environments across North America and the Middle East.