Cybersecurity Engineer (SIEM/EDR/Cloud Native Security)

Our client is a public sector technology organisation looking for an IT Security Officer/Cybersecurity Engineer with 4+ years of cybersecurity experience to support the security operations, engineering, and defence of government systems.

Responsibilities

• Perform cybersecurity operational activities including security reporting, dashboarding, compliance documentation, and security control implementation.
• Review and validate VAPT findings, support remediation planning, and track security vulnerabilities.
• Participate in threat modelling and security reviews to identify requirements and appropriate controls.
• Conduct periodic IAM reviews to ensure appropriate access and least-privilege principles.
• Support security incident response, alert triage, investigation, and escalation across SIEM, EDR, and cloud security platforms.
• Assist with threat hunting and improve detection rules, incident playbooks, and response runbooks.
• Apply security controls across CI/CD pipelines, Kubernetes platforms, cloud environments, and other technology platforms.
• Perform security analysis of code and cloud environments and support remediation of identified findings.
• Develop POCs and evaluate new cybersecurity tools and technologies in lab environments.
• Automate security processes and workflows using scripting tools such as Python or Bash.
• Work closely with security, engineering, product teams, and stakeholders to improve overall security posture.

Requirements

• At least 4 years of relevant cybersecurity experience.
• Degree in Cybersecurity, Computer Science, Computer/Electronics Engineering, Information Technology, or a related discipline.
• Strong foundational knowledge of security architecture, secure system design, threat modelling, and vulnerability management.
• Experience or exposure to CI/CD security, Kubernetes, cloud security, IAM, secrets management, and Zero Trust principles.
• Familiarity with SIEM, EDR, cloud-native security monitoring, incident response, and threat hunting.
• Scripting or automation experience with Python, Bash, or similar tools.
• Ability to work independently, troubleshoot issues, and escalate appropriately.
• Strong communication and collaboration skills, with a proactive approach to improving security processes.
• Certifications such as OSCP, CISSP, or other relevant cybersecurity certifications will be a plus.