JC04022025 Security Operations Engineer

Security Operations Engineer

• Bachelor s degree with 5 - 7 years of experience in the relevant field.
• Cybersecurity certifications (CISSP, CISM, CEH, Security+) are highly desirable.
• Experience with cybersecurity operations, including prevention, event management, incident response, and threat hunting.
• Proficiency in firewalls, Active Directory, IDS/IPS, SIEM, SOAR, EDR, endpoint protection, and email security solutions.
• Strong analytical and troubleshooting skills for complex security issues.
• Ability to maintain confidentiality and demonstrate professionalism.
• Excellent communication and documentation skills.
• Highly organized, detail-oriented, and adaptable to changing priorities.
• Experience in playbook development is a plus.
• Nice to have: Experience with Operational Technology (OT) security, including securing industrial control systems (ICS) and SCADA environments.

• Administer security tools for intrusion detection/prevention, vulnerability management, endpoint detection and response (EDR), Security Orchestration, Automation, and Response (SOAR), and remote access.
• Perform proactive threat hunting to identify and mitigate security threats before they escalate.
• Monitor security operations through SIEM and respond to incidents.
• Support 24 7 incident response to mitigate threats and enhance security.
• Centralize Security Operations within the Cybersecurity team.
• Manage security events across firewalls, SIEM, SOAR, antivirus, EDR, email security solutions, web servers, middleware, and applications.
• Conduct audits, test security controls, and assist with vulnerability management and remediation.
• Investigate security incidents and proactively analyze threats.
• Assist with corporate security initiatives and compliance requirements. Implement best practices for securing cloud and virtual environments.