Cyber Security Operations Center Engineer

About the role

DATAONE is expanding its global security capabilities to deliver continuous, expert-level security operations across its DATAONE and BSO systems, built on open-source technologies and enterprise solutions. The SOC team, based in Casablanca and Davao and led by the SOC Manager, focuses on detection, response and cyber security infrastructure management. You will act as the technical enabler for governance goals by providing the evidence and reports needed for successful audits.

Key responsibilities

• Dedicate operations to threat detection, incident response and security infrastructure engineering.
• Collect, organize and provide technical evidence, log extracts and vulnerability reports to the compliance team for group audits.
• Maintain, tune and optimize Wazuh for central logging, file integrity monitoring and host intrusion detection.
• Manage and deploy Bitdefender GravityZone for endpoint protection and automated host isolation during incidents.
• Configure and monitor Fortinet NGFW/WAF and manage network intrusion detection with Suricata.
• Administer remote infrastructure access with NetBird and WireGuard.
• Orchestrate incident response and automation with TheHive and Cortex.
• Analyze indicators of compromise with MISP, Shadowserver and SOCRadar, and run scheduled scans and CVE tracking with OpenVAS and VulnTracker.
• Score risks and map attack paths in Active Directory with BloodHound and PingCastle, and follow up with AD admins.
• Assist in evaluating and implementing a future Data Loss Prevention solution.

Required profile

• Minimum 2-3 years of experience in a SOC engineering, systems engineering or infrastructure security role.
• Professional fluency in English, written and spoken, is mandatory.
• Prior experience securing data centers, cloud infrastructure or large enterprise networks is highly valued.
• Proven ability to work with non-technical teams such as Compliance and Legal.

Required skills

• Wazuh, Bitdefender GravityZone, Fortinet (FortiGate/FortiWAF)
• NetBird, WireGuard, TheHive, Cortex
• MISP, Shadowserver, SOCRadar, OpenVAS, VulnTracker
• BloodHound, PingCastle, Suricata