Cybersecurity engineer

Roles & Responsibilities

Role Overview

The Cybersecurity engineer is responsible for managingand coordinating security incidents, performing alert investigations,supporting privileged access administration, and coordinating vulnerability,HCR, and audit activities.

This role requires strong ownership, investigationcapability, and coordination skills to ensure all security events and findingsare tracked and driven to closure.

Key Responsibilities

1. Incident Management & Alert Investigation

• Perform initial triage, investigation, andanalysis of security alerts
• Take full ownership of incidents and drive themto closure through coordination
• Act as the central point of contact acrossinfrastructure, application, and support teams
• Ensure timely escalation, follow-up, andresolution of incidents
• Maintain clear documentation of incidentprogress, findings, and closure

2. Privileged Access Management – CyberArk

• Perform user administration in CyberArk(onboarding, access changes, offboarding)
• Support periodic access reviews and compliancerequirements
• Ensure adherence to privileged access governanceand controls

3. Audit, Vulnerability Management Coordination

• Coordinate vulnerability assessments andsecurity scans
• Support and track Host Configuration Review(HCR) activities
• Work with system owners and third parties toremediate findings
• Maintain tracking of vulnerabilities,configuration gaps, and closure status
• Support audit activities by providing requiredevidence and updates

4. Log Analysis & Monitoring

• Analyze logs from systems and endpoints toinvestigate suspicious activities
• Correlate events and validate alerts to identifygenuine threats

5. Continuous Improvement

• Contribute to improving incident tracking,reporting, and coordination processes
• Demonstrate willingness to learn and expandcapabilities

Technical Skills & Qualifications

Core Requirements (Must-Have)

• Experience in SOC operations (L1/L1.5) withstrong incident handling and coordination
• Ability to investigate alerts and own incidentsend-to-end (coordination focus)
• Hands-on experience with CyberArk (useradministration)
• Familiarity with vulnerability management andHCR processes

Technical Knowledge

• Basic knowledge of Cloud enviornments and systemlog analysis
• Understanding of common security threats
• Basic scripting knowledge is an advantage
• Behavioral Competencies
• Strong coordination and stakeholder managementskills
• High ownership mindset with ability to followthrough to closure
• Analytical and detail-oriented
• Willingness to learn and adapt

Tell employers what skills you have

Incident Investigation Management
Security Threat Research
Event Monitoring
System Logs
Scripting
Incident Reports
Technical Knowledge
Cyberark
Following Up
Access Control Management
SoC
User Administration
central point of contact
Incident Management
Security Monitoring
Threat and Vulnerability Management