Cybersecurity Engineer (SIEM/EDR/Cloud Native Security)

Our client, a technology organization within the public sector, is seeking an IT Security Officer/Cybersecurity Engineer with a minimum of 4 years of experience in cybersecurity to enhance the security operations, engineering, and protection of government systems.

Key Responsibilities

• Execute cybersecurity operational tasks, which include security reporting, dashboard creation, compliance documentation, and the implementation of security controls.
• Assess and validate Vulnerability Assessment and Penetration Testing (VAPT) findings, assist in remediation planning, and monitor security vulnerabilities.
• Engage in threat modeling and security assessments to pinpoint requirements and corresponding controls.
• Conduct regular Identity and Access Management (IAM) reviews to ensure proper access levels and adherence to least-privilege principles.
• Facilitate security incident response, including alert triage, investigation, and escalation across Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), and cloud security platforms.
• Support threat hunting initiatives and enhance detection rules, incident response playbooks, and operational runbooks.
• Implement security controls throughout CI/CD pipelines, Kubernetes environments, cloud platforms, and various other technology infrastructures.
• Carry out security analyses of code and cloud settings while assisting in the remediation of any identified issues.
• Create proof of concepts (POCs) and assess new cybersecurity tools and technologies in laboratory settings.
• Automate security processes and workflows utilizing scripting languages such as Python or Bash.
• Collaborate closely with security, engineering, product teams, and stakeholders to bolster the overall security framework.

Qualifications

• A minimum of 4 years of relevant experience in cybersecurity.
• A degree in Cybersecurity, Computer Science, Computer/Electronics Engineering, Information Technology, or a related field.
• Robust foundational knowledge of security architecture, secure system design, threat modeling, and vulnerability management.
• Experience or familiarity with CI/CD security, Kubernetes, cloud security, IAM, secrets management, and Zero Trust concepts.
• Knowledge of SIEM, EDR, cloud-native security monitoring, incident response, and threat hunting methodologies.
• Proficiency in scripting or automation with Python, Bash, or similar tools.
• Ability to work autonomously, troubleshoot issues effectively, and escalate concerns as necessary.
• Excellent communication and teamwork skills, with a proactive mindset towards enhancing security processes.
• Possession of certifications such as OSCP, CISSP, or other pertinent cybersecurity certifications is considered an advantage.