Cybersecurity Operations Engineer

About the role

The Cybersecurity Operations Engineer will manage and coordinate day‑to‑day cybersecurity operations for the organization in Jordan. The role serves as the primary internal owner for SOC alerts, incidents, and security tickets, ensuring thorough investigation, prioritisation, and remediation while continuously improving detection and response capabilities.

Key responsibilities

• Own and manage cybersecurity tickets and incidents raised by the SOC/MSSP, reviewing investigations and validating severity, impact, evidence and recommended actions.
• Prioritise and coordinate remediation activities with Infrastructure, Network, Applications, Cloud, OT and other relevant teams.
• Track incidents through investigation, containment, remediation and formal closure, ensuring critical and high‑severity incidents are escalated according to defined procedures and SLAs.
• Maintain SOC ticket SLA compliance, reduce mean time to acknowledge and resolve, and improve critical/high incident closure rates.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science or a related discipline.
• 5+ years of experience in cybersecurity operations, SOC, incident response or security engineering.
• Relevant certifications such as Security+, CySA+, GCIH, SC‑200, GCIA or equivalent are preferred.

Required skills

• Hands‑on experience with SIEM, EDR/XDR, email security, vulnerability management and network‑security technologies.
• Strong understanding of incident investigation, log analysis, threat detection, MITRE ATT&CK framework and threat hunting.
• Experience with Microsoft security technologies, CrowdStrike, Qualys, Mimecast, Fortinet or similar enterprise security platforms.
• Scripting or security automation using PowerShell, Python or similar languages.