Elastic SOC Engineer (DV Security Clearance)

The Space, Defence and Intelligence business unit in CGI is a true IT Systems Integrator. We work, build, and operate bespoke, technically complex, mission-critical systems which help our clients keep us all safe and secure. We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end-to-end cyber capability. We work collaboratively with global technology companies, cutting edge SMEs and academia to deliver the optimal solution for each client., Join our team as a SOC Engineer, where you will lead the deployment of Elastic in a private cloud environment based on VMware. Your role will encompass building, configuring, and testing security functions on the platform, integrating Elastic SIEM into the main SOC, and eventually monitoring the system,

• Install and Configure: Deploy Elastic SIEM onto the platform.
• Testing and Compliance: Conduct comprehensive testing and refinement to ensure security compliance.
• Monitoring and Incident Resolution: Perform monitoring, analysis, and resolve incidents.
• Continuous Improvement: Enhance SOC configuration and automation.
• Rule Support: Develop new rules for emerging client scenarios and priorities.
• Testing and Assurance: Support broader test and assurance activities.
• Service Delivery: Demonstrate a strong track record in secure service delivery.
• Collaboration: Work effectively within a mixed client CGI team.
• Adaptability: Quickly learn and integrate new technologies.
• SIEM/SOAR Activities: Handle log gathering, event monitoring, and incident alerting.
• Information Assurance: Apply principles of information assurance.
• SIEM Configuration: Install and configure SIEM systems.
  
  Due to the nature of the role, all applicants must be Single UK national and currently hold SC Clearance (HLC is preferred) and must be willing to undergo vetting for Higher Level Clearance. This position requires onsite attendance in Gloucester., Proven experience transitioning from project to service delivery.
• Hands-on experience with Elastic SIEM.
• Proficiency with VMware.
• Knowledge of vulnerability management tooling.
  
  Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because...
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.

CGI was recognised in the Sunday Times Best Places to Work List 2024 and has been named one of the 'World's Best Employers' by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go.