Cybersecurity Engineer

Roles & Responsibilities

Security Operations and Implementation

• Continuously monitor security alerts and events generated by security tools (SIEM, IDS / IPS, firewalls, etc.) to identify and assess potential threats.
• Investigate and analyze security incidents to determine severity, scope, and potential impact on systems and networks.
• Escalate suspicious activities or confirmed security incidents to senior analysts or the incident response team for further investigation and containment.
• Respond to security incidents in alignment with established procedures, ensuring timely containment, mitigation, and recovery.
• Collaborate with the incident response team to thoroughly investigate, analyze, and resolve security breaches and data loss incidents.
• Document and maintain incident reports, ensuring accuracy and compliance with internal policies and regulatory standards.
• Utilize threat intelligence feeds to stay informed about emerging threats, attack vectors, and adversary tactics, techniques, and procedures (TTPs).
• Correlate and analyze data from multiple security sources to identify vulnerabilities, misconfigurations, or unauthorized access attempts.
• Conduct in-depth analysis of logs, network traffic, and system behavior to detect anomalies, policy violations, or malicious activity.
• Manage and maintain log data in accordance with internal security policies and regulatory requirements.
• Operate and fine-tune a range of security tools, including SIEM platforms, IDS / IPS, firewalls, antivirus software,and endpoint detection and response (EDR) systems.
• Ensure the security operations center (SOC) infrastructure remains effective and up to date by keeping pace with evolving security technologies and best practices.
• Work closely with infrastructure teams (network, system, and cloud) to implement security controls and recommend remediation strategies.
• Contribute to security implementation efforts, including onboarding of new technologies, tool integrations, and automation workflows.
• Support F2A (File to Alert) use case development and tuning to enhance detection capabilities and reduce false positives.
• Participate in vulnerability assessments and periodic penetration testing activities to proactively identify and mitigate risks.

Qualifications & Requirements

Education :

Experience :

Tell employers what skills you have

Information Security

Tactics

Security Operations

Remediation

Cyber Security

Investigation

Information Technology

Tuning

Penetration Testing

Threat Intelligence

Regulatory Requirements

Vulnerability Assessment

Network Security

Linux

CISSP

Firewalls