Cybersecurity Engineer

Job Summary:

The Cybersecurity Engineer will handle cybersecurity incidents and tickets, support security tools and controls, and coordinate with IT teams, vendors, and the SOC to maintain a secure technology environment.

Responsibilities:

• Administer and support security platforms, including EDR/XDR, firewalls, IDS/IPS, email security, vulnerability management, and cloud security tools.
• Operate and support Microsoft security technologies, including Microsoft Defender, Defender for Endpoint, Defender for Office 365, Defender for Cloud, Entra ID, Intune, and related Microsoft 365 security controls.
• Monitor security platform health, including agent and connector coverage, configurations, integrations, licensing, and platform availability.
• Investigate security alerts and incidents, perform approved containment and remediation activities, and support root-cause analysis.
• Manage cybersecurity tickets through the approved IT Service Management (ITSM) platform, ensuring appropriate prioritization, documentation, escalation, resolution, and closure.
• Implement approved security changes, including firewall rules, endpoint policies, threat indicators, access controls, exclusions, upgrades, and configuration updates.
• Support cloud and application security tools, including CSPM, DAST, SAST, vulnerability scanning, API security, and CI/CD security integrations.
• Integrate security platforms and log sources with SIEM and outsourced SOC, troubleshoot logging gaps, and support security incident escalations.
• Maintain accurate technical documentation, platform inventories, configuration backups, operating procedures, and security metrics.
• Collaborate with Infrastructure, Network, Cloud, Application, and Vendor teams to resolve security gaps and continuously improve the effectiveness of security controls.

Knowledge, Skills & Experience:

• Bachelor's degree in communications engineering, Computer Science, or a related field.
• 2–3 years of hands-on experience in cybersecurity, security operations, security engineering, or a related field.
• Practical experience with enterprise EDR/XDR, firewalls, Microsoft security technologies, vulnerability management tools, and cloud security controls.
• Experience handling security incidents, cybersecurity tickets, technical changes, troubleshooting, and vendor escalations.
• Good knowledge of networking, Windows security, Active Directory, Azure, Microsoft 365, and security logging.
• Relevant certifications such as Microsoft, Fortinet, CrowdStrike, Palo Alto Networks, or equivalent certifications are preferred.
• Strong troubleshooting, analytical, documentation, communication, and ownership skills.
• Ability to work effectively with internal technical teams, vendors, and an outsourced SOC.
• Strong attention to detail and ability to prioritize and manage multiple security incidents and requests.