We are seeking a Cybersecurity Engineer to support cybersecurity operations, security engineering, incident response and product security activities within an enterprise technology environment.
The successful candidate will contribute to security monitoring, vulnerability management, security controls, cloud and Kubernetes security, incident response, threat modelling and security automation. The role will also involve evaluating emerging security technologies and supporting proof-of-concept initiatives.
Key Responsibilities
Cybersecurity Operations
- Perform security reporting and dashboarding activities and use automation to improve operational efficiency.
- Review vulnerability assessment and penetration testing (VAPT) findings and support remediation planning.
- Validate security vulnerabilities and findings from security assessment reports.
- Support the development and refinement of incident response playbooks and operational procedures.
- Assist with security compliance documentation and evidence collection.
- Support implementation of security controls and operational security activities.
- Participate in threat modelling exercises and identify security requirements based on applicable policies and standards.
- Perform periodic Identity and Access Management (IAM) reviews to support least-privilege access.
Security Architecture & Engineering
- Apply security standards and controls across CI/CD pipelines, Kubernetes platforms and cloud environments.
- Support secure system design and implementation.
- Identify security risks and recommend appropriate technical controls and improvements.
- Support the implementation of security practices across cloud-native and platform technologies.
Cyber Defence & Incident Response
- Support cybersecurity incident response activities and escalate complex incidents appropriately.
- Perform alert triage and support investigations using security monitoring platforms.
- Contribute to detection rules, incident response playbooks and operational runbooks.
- Participate in guided threat-hunting activities to identify potential indicators of compromise.
- Support analysis and remediation of security events and vulnerabilities.
Product Security Engineering
- Develop and support proof-of-concepts and security features across multiple technology components.
- Balance security, performance, reliability and maintainability when developing technical solutions.
- Use code-security and cloud-security analysis tools to identify and remediate security findings.
- Recommend improvements to enhance product security and engineering efficiency.
Security Technology Evaluation
- Evaluate new cybersecurity tools and technologies in controlled laboratory environments.
- Conduct technical testing and document findings.
- Support proof-of-concept initiatives with defined objectives, testing criteria and outcomes.
- Research emerging cybersecurity technologies and assess their potential application.
Collaboration
- Collaborate with security, infrastructure, engineering and other technical teams.
- Work with stakeholders to ensure security activities and deliverables are completed effectively.
- Share technical knowledge, resources and lessons learned.
- Identify opportunities to improve security processes, tools and team effectiveness.
Key Requirements
- Degree in Cybersecurity, Information Security, Computer Science, Computer Engineering, Electronics Engineering, Information Technology or a related discipline.
- Relevant professional experience in cybersecurity, security engineering, security operations, cloud security or a related field.
- Foundational understanding of security architecture, secure system design and threat modelling.
- Experience supporting vulnerability validation and remediation activities.
- Familiarity with securing CI/CD pipelines, Kubernetes environments and cloud platforms.
- Familiarity with security monitoring technologies, including SIEM, EDR and cloud-native security monitoring.
- Understanding of incident response processes, detection logic and security investigation practices.
- Exposure to threat-hunting methodologies and indicators of compromise.
- Scripting or automation experience using Python, Bash or similar technologies.
- Understanding of IAM, secrets management and Zero Trust principles.
- Ability to analyse security findings and contribute to practical remediation activities.
- Strong analytical, problem-solving and communication skills.
Preferred Experience
- Experience with cloud security and cloud-native security controls.
- Experience securing Kubernetes and containerized environments.
- Experience with DevSecOps and security integration into CI/CD pipelines.
- Experience with vulnerability management and VAPT activities.
- Experience with SIEM, EDR, security analytics or security orchestration tools.
- Exposure to AI-assisted development tools, coding assistants or agentic AI workflows.
- Experience conducting security technology evaluations or proof-of-concept projects.
Certifications
Relevant cybersecurity certifications will be an advantage, such as:
- OSCP
- CISSP
- Security+, CEH or other relevant cybersecurity certifications
Behavioural Requirements
- Ability to work independently while seeking guidance when required.
- Proactive approach to identifying and addressing security issues.
- Ability to adapt to changing priorities.
- Strong collaboration and stakeholder-management skills.
- Willingness to share knowledge and contribute to team development.
- Good judgement regarding when issues require escalation.
Mandatory Skills
- Cybersecurity Operations
- Security Architecture
- Cloud Security
- Kubernetes Security
- CI/CD / DevSecOps
- Vulnerability Management
- Incident Response
- SIEM / EDR
- Threat Modelling
- IAM / Zero Trust
- Python / Bash Automation
Top 3 Skills
- Cybersecurity Engineering & Cloud Security
- Kubernetes / CI-CD / DevSecOps Security
- Incident Response & Vulnerability Management