SOC Platform Engineer (AI, Wazuh, Graylog and Linux)
- Hiring Organisation
- UK Cyber Defence
- Location
- Falmouth, Cornwall, United Kingdom
- Employment Type
- Permanent
- Salary
- GBP Annual
cloud. You will write and tune Wazuh decoders and rules, including PCRE2-based decoders for awkward log formats, mapping detections to MITRE ATT&CK. You will onboard new client log sources, from endpoint agents and firewalls to cloud tenants and Microsoft Sentinel integrations, and make sure each … writing; Graylog and OpenSearch or Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service provider experience; involvement in the security ...