Cybersecurity Operations Engineer

About the role

Manage and coordinate day‑to‑day cybersecurity operations, acting as the primary internal owner for SOC alerts, incidents and security tickets. Ensure security events are investigated, prioritized, escalated, remediated and closed while continuously improving detection, response and operational security capabilities across the group.

Key responsibilities

• Own and manage cybersecurity tickets and incidents raised by the SOC/MSSP.
• Review SOC investigations and validate severity, impact, evidence and recommended actions.
• Prioritize and coordinate remediation activities with Infrastructure, Network, Applications, Cloud, OT and other relevant teams.
• Track incidents and security tickets through investigation, containment, remediation and formal closure.
• Ensure critical and high‑severity incidents are escalated according to defined procedures and SLAs.
• Challenge and escalate incomplete or inadequate SOC investigations when required.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science or related discipline.
• 5+ years of experience in cybersecurity operations, SOC, incident response or security engineering.
• Hands‑on experience with SIEM, EDR/XDR, email security, vulnerability management and network‑security technologies.
• Strong understanding of incident investigation, log analysis, threat detection and response.
• Experience managing SOC or MSSP escalations and security incidents.
• Knowledge of MITRE ATT&CK, threat hunting, incident‑response methodologies and security monitoring principles.
• Experience with Microsoft security technologies, CrowdStrike, Qualys, Mimecast, Fortinet or similar enterprise security platforms is preferred.
• Scripting or security automation experience using PowerShell, Python or similar technologies is an advantage.
• Relevant certifications such as Security+, CySA+, GCIH, SC‑200, GCIA or equivalent are preferred.

Required skills

• SIEM
• EDR/XDR
• Email security
• Vulnerability management
• Network security technologies
• PowerShell
• Python
• Microsoft security technologies
• CrowdStrike
• Qualys
• Mimecast
• Fortinet
• MITRE ATT&CK