BENCH+ PROFILE

Matteo

Security Operations Engineer
SOC operations, SIEM administration, vulnerability management, EDR, and threat detection

Senior security operations specialist with strong hands-on depth in managed SOC environments, SIEM platforms, EDR administration, vulnerability assessment, incident response, and risk-oriented security communication.

BEST-FIT USE CASE

Best suited for a managed security operations or enterprise SOC role focused on SIEM administration, customer onboarding, detection configuration, vulnerability management, incident escalation, audit support, and security platform operations.

Not the primary fit: Less aligned with roles centered primarily on cloud-native security architecture, software development, or infrastructure automation.

EVIDENCE HIGHLIGHTS

What supports the assessment

Administered and optimized a multi-tenant security operations platform combining QRadar, Tenable, and CrowdStrike Falcon for enterprise customer environments.

Designed and implemented customer-specific QRadar dashboards and detection rulesets aligned with compliance and security monitoring needs.

Performed vulnerability scans using Tenable and Nessus, then produced remediation-oriented risk reports for customer and governance audiences.

Handled incident triage, investigation, and closure across multiple SIEM and security platforms in a managed SOC environment.

Authored threat intelligence and early-warning advisories for critical vulnerabilities and mapped security events to MITRE ATT&CK techniques.

Provided L2 escalation support for complex incidents and threat hunting activity.

Coordinated SOC analyst teams, delivered training, and introduced standardized investigation and documentation practices.

Discussed practical approaches to SIEM versus SOAR, EDR/XDR, Zero Trust, digital signature verification, encryption, TLS enforcement, and security-by-design trade-offs.

WORKING STYLE

How they show up

Explains technical security work in a structured manner and can describe end-to-end operational workflows.
Uses ticketing and task-tracking practices in SOC environments.
Works directly with service, delivery, project, sales, audit, and customer stakeholder groups.
Documents security risks, escalates when needed, and uses recognized frameworks to support risk decisions.
Has operated both as an individual security engineer and as a coordinator for analyst teams.

KEY STRENGTHS

Hands-on operation of multi-tenant security monitoring environments across SIEM, EDR, and vulnerability management tooling.
Practical incident triage, investigation, escalation, and reporting experience in enterprise SOC settings.
Experience designing QRadar dashboards, detection rulesets, monitoring baselines, and executive-facing security reports.
Strong vulnerability management practice, including scan scheduling, remediation guidance, and risk reporting.
Applied understanding of defense-in-depth, Zero Trust concepts, endpoint security, network segmentation, and security risk handling.
Experience coordinating SOC analysts, mentoring junior team members, and standardizing investigation practices.
Able to communicate security metrics, audit findings, and risk trade-offs to technical teams and senior stakeholders.

PRIMARY SKILLS

SOC operationsSIEM administrationIBM QRadarVulnerability assessmentTenableCrowdStrike FalconIncident responseThreat detectionEDR administrationMITRE ATT&CK

ADDITIONAL TECHNOLOGIES

SplunkFortinet FortiSIEMMicrosoft 365 DefenderTrendMicro Deep SecurityCisco ASAIDS/IPSPowerShellBashISO 27001GDPRJiraCortex XSOAR

INDUSTRY EXPERIENCE

CybersecurityEnterprise SoftwareTelecomSaaS

ROLE MATCH

Security Operations EngineerStrong

DevOps / Platform EngineerPartial