Key Responsibilities:
• Handles day to day security engineering activities, including configuration and maintenance of firewalls, IDS/IPS, SIEM tools, and endpoint protection systems.
• Conduct vulnerability assessments and coordinate remediation with relevant infrastructure teams.
• Monitor, analyze, and respond to security incidents and alerts in a timely manner.
• Maintain and tune SIEM rules, correlation policies, and dashboards for accurate threat visibility.
• Collaborate with IT, Network, and Cloud teams to ensure secure configuration and patch compliance.
• Support audits, compliance checks, and risk assessments for regulatory and internal requirements.
• Prepare and maintain security documentation, SOPs, and incident response playbooks.
Key Performance Indicators (KPIs):
• Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) for security incidents.
• Vulnerability closure rate within defined SLAs.
• Compliance with internal and external security standards.
• Reduction in repeat or preventable incidents.
• SIEM alert accuracy (false positive ratio).
• Endpoint and network patching coverage.
· Leadership/Behavioral competencies: Quality of Work, External Focus, Ownership, Communication Skills, Problem Solving, Proactiveness, Collaboration, Expertise and Training & Development
Certifications: Advanced GIAC/SANS certifications - GCIH, GCIA, GCFE, GCFA, GREM, GIAC, GSEC, GWAPT, ISC-squared CISSP, CompTIA Security+ preferred
Qualifications & Experience:
· Degree: Graduate / Professional degree in computer science, Information Technology, Electronics, or related discipline.
· Years of experience: Graduate - 5 to 7 years
· Relevant experience: 5 + years
Key Interfaces:
· Internal: Collaborates with Infrastructure Operations, Network Engineering, Application Support, and IT Governance teams to ensure secure system and network configurations.
· External: Coordinates with client cyber security teams, security vendors, OEMs, and managed security service providers (MSSPs) for tool support, incident escalation, and patch advisories.