🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
The SOC Engineer is responsible for security monitoring, incident triage and after-hours first-line service delivery for the company managed service clients. The role combines security operations with managed service delivery, ensuring that security events and technical issues are identified, assessed, documented, progressed and escalated appropriately. The SOC Engineer operates as part of the wider Service Delivery function, working closely with Service Desk Engineers and Service Delivery Management to provide reliable 24/7 support for contracted clients. What success looks like: Security alerts are monitored, assessed and responded to appropriately. Security incidents are accurately identified, documented and escalated. 24/7 clients receive consistent and professional after-hours support. Tickets and incidents have clear ownership and progression. Escalations contain sufficient technical context to enable efficient resolution. Security trends, recurring issues and risks are identified and reported. Core accountabilities: Security Monitoring & Incident Detection Continuously monitor security tools and alerting platforms. Review security alerts and determine appropriate action. Identify suspicious activity and potential threats. Escalate security concerns according to defined processes Security incident triage and response: Assess and validate security incidents. Perform initial investigation and impact assessment. Support containment activities within agreed processes. Maintain accurate incident records and investigation notes. Escalate incidents requiring additional expertise or authority. After-hours 1st line service desk coverage: Provide first-line support for contracted 24/7 clients outside standard business hours. Answer, log and categorise incoming requests. Perform basic troubleshooting and resolution within agreed capability. Progress tickets appropriately and maintain ownership. Escalate technical issues to senior engineers where required Escalation and handover management: Follow defined escalation routes for technical and security issues. Ensure escalations contain accurate information, troubleshooting completed and relevant context. Engage senior engineers and management when required based on impact or complexity. Support smooth handover between teams. Security and incident reporting Maintain accurate security and service documentation. Track security incidents, trends, and recurring issues. Contribute to incident reporting and service improvement activities. Identify opportunities to improve monitoring, processes and knowledge sharing. Key Performance Indicators (KPIs): Security and service performance: Security alerts and tickets responded to within agreed SLA After-hours client support delivered within agreed SLA Security incidents progressed within expected timescales Ownership and quality: 100% of tickets/incidents have clear ownership and next action Ticket and incident notes meet quality standards Reduction in avoidable rework or missed information Escalation management: Correct escalation of technical and security issues Quality of handovers to wider service desk team Issues escalated before becoming client-impacting Security improvement: Recurring issues identified and reported Contribution to security documentation, processes and knowledge sharing Team and capability development: Completion of agreed training and certifications Development of technical and security skills Technical requirements Essential: Experience within an IT support/service desk environment. Strong troubleshooting skills. Understanding of Microsoft environments. Experience working with tickets, priorities and SLAs. Good written and verbal communication skills. Interest in developing security capability Advantageous: Exposure to: Microsoft Defender Microsoft 365 security Endpoint security tools Firewalls Identity and access management Experience and development The ideal candidate will be a technically strong first-line engineer or junior second-line engineer looking to develop into security operations. Experience within an MSP environment is advantageous. Relevant certifications are beneficial but not essential including: CompTIA Security + Microsoft SC-900 Microsoft SC-200 MD-102 MS-102 CompTIA Network+ Desired Skills: SOC 1st/2nd Line troubleshooting msp Microsoft 365 security Endpoint security tools Firewalls Identity and access management+
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.