Post by Isidora Nikolić 
August 28, 2024 | 
Imagine having someone who’s always got your back online. That’s exactly who the SOC Support Engineers at BlueGrid.io are. These dedicated professionals work quietly but effectively behind the scenes, ensuring everything runs smoothly and safely in the digital world.
In this blog, our SOC Support Engineer Andjela takes you behind the scenes to show what day-to-day life looks like in this role, what drives the team, and why their work is crucial in protecting systems.
As they play a key part in safeguarding the organization and its people, their job is demanding but deeply rewarding. By the end, you’ll also understand the vital role these engineers play and the passion and purpose that fuels their work.
How would you describe your role as a SOC Support Engineer at BlueGrid.io?
As a SOC Support Engineer, I serve as the frontline defense against cyber threats, ensuring the security and resilience of customers’ IT infrastructure. My role is pivotal in monitoring, detecting, and responding to potential security incidents in real-time. I am part of a SOC team of experienced cybersecurity experts who analyze alerts, investigate anomalies, and mitigate risks before they escalate into major incidents.
What inspired your journey into the field of cybersecurity? Was there a defining moment when you knew this was your right path?
My journey into cybersecurity began during my bachelor’s studies in IT, where I delved into various aspects of technology, including programming, management, and networks. While each of these areas was fascinating, cybersecurity truly captivated me. The complexity and importance of protecting digital assets in an increasingly connected world sparked a deep desire in me to pursue this field further. After completing my bachelor’s degree, I decided to specialize by pursuing a master’s degree focused on computer networks and systems security, system administration, and digital forensics. This strengthened my passion for cybersecurity.
The defining moment for me came during my final graduate project, where I investigated cybercrime in my country from a technical and legal perspective. The project involved analyzing real-world cybercrime cases, understanding the methods used by attackers, and exploring the legal frameworks in place to combat these threats. As I delved deeper into the technical aspects of these crimes, I realized how critical it was to have skilled professionals who could anticipate, prevent, and respond to such threats.
The beginning of my career was challenging because I knew how rare cybersecurity professionals are in our country, especially women, but today I am very proud to be part of this dynamic industry.
What do you enjoy most about this role?
It is the dynamic nature of this field. Every day presents new challenges, with emerging cyber threats and novel ways to exploit system vulnerabilities. This constant evolution requires me to continuously improve my skills and stay updated with the latest technologies.
Beyond the technical aspects, I find great fulfillment in spreading awareness about cybersecurity. For the past year, I’ve dedicated myself to educating others by writing articles.
You also contribute to raising awareness about cybersecurity by writing blog posts on the BlueGrid website. How do you see your influence in this area? What do you enjoy about writing?
I am actively writing blogs about the importance of cybersecurity awareness. My passion for sharing knowledge has led me to embark on a writing journey, where I aim to impart my cybersecurity insights and expertise to a wider audience. I cover various topics related to cybersecurity, sharing my experiences and knowledge about how individuals and companies can protect themselves from the threats surrounding us today.
I began to see my influence when people I didn’t know before started contacting me with questions related to my latest blog or to give their comments and compliments. Of course, my favorite part is knowing that my article has genuinely helped someone and receiving praise from individuals with long careers in cybersecurity. It’s a combination of personal growth, ongoing challenges, and the opportunity to make a broader impact that makes my role so enjoyable and fulfilling.
If you had to choose one of your blog posts to highlight, which one would it be and why?
If I had to highlight just one of my blogs, it would be the one titled “Best Practices and Tips for Online Safety” because it covers some of the most basic tips on how to improve cybersecurity. This blog is suitable for everyone, regardless of their level of technical knowledge, and focuses mainly on the importance of strong passwords and their protection, using a secure online connection, and recognizing the most common threats today, such as phishing attacks.
Considering that the cybersecurity industry is constantly evolving, how can someone outside the industry become aware of the importance of SOC support?
People who are not in the IT world are still unaware of the dangers that surround us every day in the online world, and they need to be exposed to this information as much as possible. Even IT professionals are not always entirely sure what the role of a SOC engineer entails.
This gap in awareness is precisely why I decided to write about the security risks and threats that surround us every day. Whether you’re an IT expert, a non-IT individual, or a company, understanding how to protect yourself is crucial. In one of my blogs, I explained the role of SOC engineers and highlighted their importance in protecting our digital lives. I hope that through my blogs, I will bring the critical role of SOC engineers closer to as many people as possible.
What do you consider the must-have and nice-to-have skills for this position, both in terms of soft and technical skills?
The skills that a SOC support engineer must possess are excellent knowledge of networks, operating systems, incident response, VPNs, IDS/IPS, SIEM tools, and firewalls. Skills that would be beneficial but are not essential include scripting, automation, forensics, and penetration testing.
Regarding soft skills, a good SOC support engineer should have strong analytical thinking, effective verbal and written communication, problem-solving abilities, attention to detail, and team collaboration. Additional skills that can provide an advantage, though they are not crucial, include project management, leadership, and critical thinking.
What are the most challenging aspects of your daily routine in the SOC?
Our daily job can be challenging due to the need to balance different threats and incoming alerts. A SOC engineer is tasked with monitoring these alerts and staying informed about network activities at all times. This is challenging because continuous attention is required to ensure that important warnings do not go unnoticed, which could potentially lead to serious consequences for the organization.
Another equally important challenge is that the SOC team operates 24/7 and serves as the first line of defense for all users. Regardless of how demanding shift work can be or how busy we are, every client needs to be attended to, and all their requests must be fulfilled.
What advice would you give to new team members stepping into your role? Anything you wish someone had told you?
What I advise new team members is to focus initially on learning the tools and technologies we use every day. It’s important to recognize that learning is an ongoing process, to remain curious, and to continue seeking knowledge. They should feel free to reach out to me, as well as other senior colleagues, for any help or explanations they need, as we are here to support them during their initial months on the job.
In addition to continuous learning, expanding their knowledge, and improving their soft skills, another piece of advice is to find a work-life balance. They should set boundaries and manage their time effectively.
Do you agree with the statement “Security is a team sport”? What does it mean to you, and how does your team put this into practice?
I would agree with the statement, “Cybersecurity is a team sport.” Specifically, when it comes to SOC teams, excellent teamwork is essential because we face various challenges and tasks every day, where mutual support is crucial. Our team’s success relies heavily on our strong communication and collaboration skills. I am happy to be part of such a cohesive team, where I can always expect support and understanding from each member.
Lastly, could you share any go-to resources or habits that have significantly helped you grow your expertise in cybersecurity?
I would advise people who are new to the cybersecurity field and want to progress to constantly improve themselves through courses and certifications. Many free resources are available on the internet, and if necessary, there are useful international certifications that are paid but offer significant benefits for security positions. Additionally, hands-on practice is valuable for beginners; setting up a home lab and using basic tools like Kali Linux and Wireshark can be very helpful.
Networking is important not only for experienced cybersecurity engineers but also for beginners. This can be achieved by attending various conferences and webinars on cybersecurity topics and by joining well-known international cybersecurity groups. For beginners, this is a great opportunity to find a mentor or join a group of peers to learn together and share experiences on different topics.
The key is continuous improvement and curiosity. Whether it’s through reading technical blogs, listening to cybersecurity podcasts, or following industry leaders on social media, all these activities can contribute to enhancing your knowledge.
