SOC/SIEM Engineer Soneri Bank Karachi

SOC/SIEM Engineer Role at Soneri Bank – Complete Career Guide

Soneri Bank, a leading financial institution in Pakistan, is currently hiring for the position of SOC/SIEM Engineer (Security Operations Center). This is an exciting opportunity for professionals with a strong technical background in information security and SIEM engineering to join a dynamic team focused on safeguarding the bank’s digital assets.

The role is based in Karachi and involves managing SIEM platforms, threat detection, log management, and incident response to maintain a robust cybersecurity posture.

Below is a complete guide to this role, including responsibilities, qualifications, skills, and application instructions, helping potential applicants understand this opportunity fully.

About Soneri Bank

Soneri Bank is one of Pakistan’s prominent banks, known for offering retail, corporate, and digital banking solutions. The bank emphasizes security, innovation, and operational excellence, making cybersecurity roles highly critical in its organizational structure.

Working at Soneri Bank provides professionals with:

• Exposure to advanced banking technologies

• Opportunity to work in a dedicated cybersecurity team

• Experience with industry-standard tools and frameworks

• Professional growth in information security and risk management

Job Overview

The SOC/SIEM Engineer role is technical and specialized, focusing on managing security information and event management systems while supporting the Security Operations Center (SOC) in threat detection and response.

Roles and Responsibilities

The SOC/SIEM Engineer plays a critical role in enhancing the bank’s cybersecurity defense. Key responsibilities include:

1. SIEM Management

• Manage and maintain multiple SIEM platforms, specifically WAZUH and IBM QRadar

• Perform log collection, data normalization, and parsing

• Regularly check SIEM health to ensure all components run efficiently

2. Threat Detection and Use-Case Development

• Apply knowledge of the MITRE ATT&CK framework to create custom SIEM use-cases

• Perform rule tuning and optimization to align detection logic with current threat patterns

• Minimize false positives to ensure SOC team responds only to genuine security alerts

3. Security Controls and Tool Management

• Work with EDR, XDR, and NDR tools, and manage OS security for Windows, Linux, Unix, and AIX environments

• Onboard new log sources and validate that data is properly parsed and categorized in the SIEM

4. Log Assessment and Validation

• Conduct security log assessments

• Ensure completeness and accuracy of logs after onboarding

• Maintain logs for operational monitoring and compliance purposes

5. Incident Response and Documentation

• Develop and update incident response playbooks

• Maintain technical documentation and knowledge base for SOC procedures

• Collaborate with relevant teams to strengthen overall defense posture

6. Team Collaboration

• Work closely with other security teams to enhance organizational cybersecurity

• Provide technical insights to improve threat detection and response capabilities

Required Qualifications

Candidates must hold a Bachelor’s or Master’s degree in one of the following areas:

• Information Security

• Computer Science

• Information Technology (IT)

• Engineering

This ensures the candidate has a strong technical foundation in cybersecurity and information systems.

Experience Requirements

• 3–4 years of experience in a Security Operations Center (SOC) or SIEM engineering role

• Hands-on experience with IBM QRadar and WAZUH for SIEM optimization

• Ability to maximize performance and minimize false positives in SIEM alerts

• Experience in log management, rule creation, and security monitoring in large-scale environments

This experience equips candidates to manage critical security detection and response operations effectively.

Key Skills and Competencies

Technical Skills

• Deep understanding of SIEM architecture

• Expertise in log collection, normalization, and parsing

• Proficiency with security controls and tools (EDR, XDR, NDR)

• Knowledge of multiple operating systems: Windows, Linux, Unix, AIX

• Familiarity with the MITRE ATT&CK framework for threat detection

Analytical Skills

• Ability to tune SIEM rules and optimize detection logic

• Experience minimizing false positives

• Strong problem-solving skills for security incidents

Collaboration and Communication

• Work effectively with other security teams and stakeholders

• Maintain detailed documentation for incident response and operational processes

Why This Job is a Great Opportunity

The SOC/SIEM Engineer role at Soneri Bank offers several advantages:

1. Specialized Technical Role – Focus on SIEM management and advanced cybersecurity monitoring

2. Exposure to Leading Tools – Gain hands-on experience with IBM QRadar, WAZUH, and EDR/XDR tools

3. Career Growth – Develop expertise in SOC operations and incident response in a large financial institution

4. Professional Networking – Collaborate with top cybersecurity professionals in Pakistan

How to Apply

Interested candidates should submit their CV via email, clearly mentioning the job title in the subject line.

Application Details

Only shortlisted candidates will be contacted for interviews, so ensure your application clearly demonstrates relevant technical expertise and SOC experience.

Tips for Applicants

1. Highlight SIEM Expertise – Clearly mention experience managing IBM QRadar and WAZUH, along with rule tuning and log management.

2. Demonstrate Threat Detection Skills – Include any experience creating use-cases using MITRE ATT&CK framework.

3. Showcase Security Tool Knowledge – Mention hands-on experience with EDR, XDR, NDR tools.

4. Emphasize OS Competency – Highlight working knowledge of Windows, Linux, Unix, or AIX systems.

5. Include Documentation and Response Skills – Detail experience creating playbooks, technical documentation, or incident response workflows.

Final Thoughts

The SOC/SIEM Engineer (Security Operations Center) role at Soneri Bank is ideal for cybersecurity professionals with 3–4 years of SOC or SIEM experience.

This role offers the opportunity to manage SIEM platforms, detect threats, optimize security rules, and support the SOC team in a highly reputable banking environment.

If you are technical, detail-oriented, and passionate about cybersecurity, this position provides both career growth and hands-on exposure to advanced security operations.