Teams at NCC Group

Monitor systems for threats, analyze security incidents, provide incident remediation, and mentor junior team members in a Security Operations Center.

Lead a global team to build, maintain and improve detection logic across MXDR technologies (EDR, NDR, SIEM). Set strategy, manage senior detection engineers, collaborate with TI/DFIR/Red Team, ensure high-fidelity detections with low false positives, apply data science to improve detection and SOC efficiency, and provide transparent client coverage reporting.

The Splunk Engineer will design, build, and manage the Splunk SOAR service, focusing on automation and security response, while developing and deploying playbooks effectively in production environments.