Log In
Sign Up
Job Description
Position: Senior Cyber Security Engineer
The Senior Cyber Security Engineer plays a crucial role in safeguarding the organization’s digital assets. This position is responsible for designing, implementing, and maintaining IT security infrastructures to prevent, detect, and manage cyber threats. The role requires a profound knowledge of network and software security vulnerabilities, along with skills in incident response and risk management. The Senior Cyber Security Engineer collaborates closely with various teams to develop and enforce security policies, conduct security audits, and ensure compliance with regulatory standards.
Security Configuration, Monitoring and Management (SCMM)
1. Configure, finetune and maintain security tools and technologies, including SIEM, Email security gateway, and advanced threat detection systems.
2. Lead and supervise the monitoring of security events and logs to identify suspicious activity and potential threats.
3. Direct the SOC team during incident response efforts, ensuring rapid containment and mitigation of threats.
4. Proactively search for undetected threats within the environment, using knowledge of the latest attacker techniques and tools.
5. Aggregate logs from different sources into a centralized SIEM system.
6. Develop and implement correlation rules to identify complex threats and Customize alerts for specific events that warrant immediate action.
7. Periodically review and update security policies, especially after an incident or major change in the environment.
8. Analyse and recommend security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitor for compliance.
Governance
1. Contribute to the creation, review, and updating of IT security policies, procedures, and protocols to ensure they are aligned with current industry best practices and regulatory requirements.
2. Monitor and enforce compliance with security policies and procedures, providing guidance to ensure adherence to frameworks such as ISO 27001, or NIST.
3. Oversee and evaluate the effectiveness of security measures, making recommendations for improvement and ensuring quality control throughout the processes.
4. Promote security awareness across the organization and participate in the development and delivery of security training programs for staff.
5. Perform routine audits on security of the infrastructure and present findings.
Reporting and Documentation (RD)
1. Develop and maintain comprehensive documentation for all incident response activities.
2. Conduct thorough analyses of historical data to identify trends and to anticipate potential future threats.
3. Craft clear, strategic, and technical reports for executive leadership, providing insights into IT Security operations and threat landscapes.
4. Provide support during internal and external audits by preparing necessary documentation and evidence.
5. Develop and maintain metrics and dashboards to track the performance and effectiveness of the Cybersecurity program.
Problem Resolution and Troubleshooting
1. Provide guidance and support to junior team members in resolving complex issues.
2. Conduct in-depth root cause analyses for security incidents and system compromises.
3. Collaborate with IT and network teams to develop and implement fixes and long-term solutions to security challenges.
4. Continuously seek to improve the incident resolution process through automation, process refinement, and tool upgrades.
Training and Development
1. Ensure all certifications required for the role (see below) are met within 6 months of joining FutureX.
2. Ensure all certifications are kept valid.
3. Maintain knowledge of all relevant aspects of Security administration and expand areas of required speciality knowledge.
4. Increase professional knowledge and awareness by reading and participating in technical events.
REQUIRED QUALIFICATIONS/ CERTIFICATIONS
1. CompTIA Security+
2. Cisco Certified Network Associate (CCNA) Security
3. EC Council Certified Ethical Hacker
4. Certified Information Systems Security Professional (CISSP)
REQUIRED EXPERIENCE: 6-8 years of experience in cybersecurity.
REQUIRED SKILLS:
- Ability to analyze and interpret complex information from various sources and understand the impact on the IT security operations.
- Fluent spoken and written English
- Capable of effectively articulating technical information to a range of audiences, including non-technical stakeholders.
- Proven leadership skills with the capacity to guide, mentor, and motivate a team of analysts.
- Effective time management skills and the ability to prioritize tasks in a high-pressure environment.
TECHNICAL COMPETENCIES:
- Advanced knowledge in SIEM
- Forensic analysis
- Network security
- Endpoint security
- Threat modeling
- Compliance and risk management
OTHER REQUIREMENTS:
- Certifications from vendors of widely used security tools and technologies can be beneficial.
- Some travel and possible project work at customers offices
- Some out-of-hours work
