Role Overview
We are looking for an experienced and hands-on L2/L3 Security Engineer to play a key role in operating and enhancing our cybersecurity defences. As a senior member of the security operations team, you'll work with cutting-edge tools to detect, analyse, and respond to complex security threats.
Key Responsibilities
- Lead the configuration, tuning, and optimization of security platforms including:
- Breach & Attack Simulation (BAS) tools
- Attack Surface Management (ASM)
- File Upload Security
- Decoy/Honeypot Systems
- Phishing Simulation Platforms
- MDM Solutions
- Secure Backup & Ransomware Protection
- Network Access Control (NAC)
- Perform in-depth investigations of advanced threats, escalated incidents, and suspicious behaviour.
- Collaborate with AD/Infra teams to enhance Active Directory Security posture.
- Support GRC teams in ensuring alignment with internal controls and regulatory standards.
- Develop scripts, tools, or playbooks to automate recurring processes and improve response times.
- Document incident response actions and maintain operational SOPs and knowledge base.
Required Skills & Experience
- 3+ years of hands-on experience in cybersecurity operations or engineering.
- Strong technical knowledge across multiple security domains (as listed above).
- Proficiency in analyzing logs, alerts, and forensic data for root cause analysis.
- Working knowledge of SIEM, SOAR, EDR, and other security operations tools.
- Familiarity with scripting (e.g., Python, PowerShell) for automation is a plus.
- Relevant certifications (e.g., CEH, OSCP, GCIA) are advantageous.