Cybersecurity Operations Engineer

About the role

We are looking for a Cybersecurity Operations Engineer to protect our digital assets by monitoring, detecting and responding to threats across networks, endpoints, cloud platforms and applications. The role ensures the continuous operation of security technologies and supports the organization’s overall resilience.

Key responsibilities

• Monitor, analyze and investigate security alerts, events and incidents using SIEM and other monitoring tools.
• Perform incident triage, containment, eradication, recovery and escalation following established response procedures.
• Operate and maintain endpoint, network, cloud and email security solutions on a daily basis.
• Develop and refine detection use cases to improve security monitoring effectiveness.
• Coordinate vulnerability remediation with infrastructure, application and cloud teams and validate fixes.
• Support patch management, technology upgrades and infrastructure refresh projects to reduce risk.
• Validate security controls during system migrations and conduct post‑implementation security checks.
• Review and verify integrations between security platforms, enterprise systems and third‑party services.
• Assist with Identity and Access Management activities, including privileged access monitoring and periodic access reviews.
• Maintain incident response documentation, operational procedures and security runbooks.
• Track remediation activities and ensure timely resolution of identified findings.
• Recommend improvements to security automation, monitoring and operational processes.
• Collaborate with cross‑functional teams to embed security best practices into daily operations.
• Prepare operational reports and provide regular updates on incidents and remediation efforts.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity or a related field.
• Minimum 5 years of experience in cybersecurity operations, SOC or information security within an enterprise environment.
• Relevant certifications such as CCNA Security, CCNP Security, CISSP, CISM, CEH or Security+ are preferred.

Required skills

• Firewalls
• Network Access Control (NAC)
• Web Application Firewalls (WAF)
• Endpoint Detection & Response (EDR/XDR)
• Email security solutions
• SIEM platforms
• Vulnerability Management tools
• Identity and Access Management (IAM) and Privileged Access Management (PAM)
• Cloud security concepts (Azure, AWS, Google Cloud)
• Networking and operating systems
• Security best practices and incident response processes