Cybersecurity Engineer

Job Summary: The Cybersecurity Engineer will handle cybersecurity incidents and tickets, support security tools and controls, and coordinate with IT teams, vendors, and the SOC to maintain a secure technology environment. Responsibilities: Administer and support security platforms, including EDR/XDR, firewalls, IDS/IPS, email security, vulnerability management, and cloud security tools. Operate and support Microsoft security technologies, including Microsoft Defender, Defender for Endpoint, Defender for Office 365, Defender for Cloud, Entra ID, Intune, and related Microsoft 365 security controls. Monitor security platform health, including agent and connector coverage, configurations, integrations, licensing, and platform availability. Investigate security alerts and incidents, perform approved containment and remediation activities, and support root-cause analysis. Manage cybersecurity tickets through the approved IT Service Management (ITSM) platform, ensuring appropriate prioritization, documentation, escalation, resolution, and closure. Implement approved security changes, including firewall rules, endpoint policies, threat indicators, access controls, exclusions, upgrades, and configuration updates. Support cloud and application security tools, including CSPM, DAST, SAST, vulnerability scanning, API security, and CI/CD security integrations. Integrate security platforms and log sources with SIEM and outsourced SOC, troubleshoot logging gaps, and support security incident escalations. Maintain accurate technical documentation, platform inventories, configuration backups, operating procedures, and security metrics. Collaborate with Infrastructure, Network, Cloud, Application, and Vendor teams to resolve security gaps and continuously improve the effectiveness of security controls. Knowledge, Skills & Experience: Bachelor’s degree in communications engineering, Computer Science, or a related field. 2–3 years of hands-on experience in cybersecurity, security operations, security engineering, or a related field. Practical experience with enterprise EDR/XDR, firewalls, Microsoft security technologies, vulnerability management tools, and cloud security controls. Experience handling security incidents, cybersecurity tickets, technical changes, troubleshooting, and vendor escalations. Good knowledge of networking, Windows security, Active Directory, Azure, Microsoft 365, and security logging. Relevant certifications such as Microsoft, Fortinet, CrowdStrike, Palo Alto Networks, or equivalent certifications are preferred. Strong troubleshooting, analytical, documentation, communication, and ownership skills. Ability to work effectively with internal technical teams, vendors, and an outsourced SOC. Strong attention to detail and ability to prioritize and manage multiple security incidents and requests. Show more