Cyber Security Engineer

About the role

The Cyber Security Engineer protects the organization’s IT infrastructure, data, and systems from cyber threats. The role combines engineering, incident response, monitoring, and vulnerability management to maintain a strong security posture.

Key responsibilities

• Monitor security alerts and provide 24/7 incident response coverage.
• Collect, manage, and analyze logs across all systems using a SIEM platform.
• Develop, implement, and enforce organization‑wide security policies and best practices.
• Triage and troubleshoot security systems to minimise disruptions.
• Identify and remediate vulnerabilities, perform regular penetration tests and produce actionable reports.
• Document incidents, breaches, and vulnerabilities in the help‑desk ticketing system.
• Collaborate with security vendors, consultants, and the Infrastructure Team on firewalls, IDS/IPS, and network defence.
• Serve as escalation point for the Help Desk and mentor team members on security awareness.
• Participate in IT projects involving infrastructure upgrades and stay current with emerging threats.

Required profile

• 12+ years of network engineering/support experience and 5+ years in cybersecurity.
• Excellent written and verbal communication for both technical and non‑technical audiences.
• Advanced knowledge of Microsoft Active Directory, Azure Entra ID, and OKTA IAM (IdP, SSO, SAML, OIDC, OAuth, MFA, SCIM).
• Deep expertise in firewalls, IDS/IPS, routing, VPN configurations.
• Strong understanding of networking protocols (TCP/IP, SSL, DNS, DHCP, NTP, SNMP, SMTP, SSH).

Required skills

• Microsoft Active Directory
• Azure Entra ID
• OKTA IAM (IdP, SSO, SAML, OIDC, OAuth, MFA, SCIM)
• Firewall technologies, IDS, IPS, VPN, routing
• Networking protocols: TCP/IP, SSL, DNS, DHCP, NTP, SNMP, SMTP, SSH
• SIEM log collection and analysis
• Penetration testing and vulnerability management
• Incident response and documentation
• Help‑desk ticketing systems