Pen Tester / SOC Analyst
Core
A security professional splitting time between authorized penetration testing and Security Operations Centre (SOC) work to validate detections and improve telemetry.
Role type
Penetration Tester / SOC Analyst
Builds
Detection rules, use cases, dashboards, response playbooks, and security telemetry improvements
Domain
Cybersecurity, Cloud Security, Identity Security
Required skills
Penetration testing, SIEM triage, EDR/XDR operations, Detection engineering, MITRE ATT&CK mapping, Active Directory, Entra ID, Microsoft 365, Windows/Linux security
Preferred skills
Incident response, Cloud security, Agile delivery
Technologies
SIEM, EDR, XDR, KQL, SPL, Sigma, Active Directory, Entra ID, Microsoft 365, Windows, Linux
Responsibilities
Plan and deliver authorized penetration tests across web apps, APIs, infrastructure, identity services and cloud platforms; Monitor and triage alerts across SIEM, EDR and XDR platforms; Develop, tune and validate detection rules, use cases, dashboards and response playbooks; Run proactive threat hunts using telemetry and threat intelligence; Report findings with evidence, risk ratings, remediation advice and re-test outcomes
Seniority
Mid-level to Senior, hands-on IC