Cybersecurity Operations Engineer

Job Description

-Reporting & Continuous Improvement: Prepare security monitoring, access review, incident, and compliance reports while maintaining dashboards, KPIs, and risk tracking.
-Stakeholder Collaboration: Work with Cybersecurity, IT Infrastructure, Network, Cloud, Application, Risk, Compliance, and Audit teams to strengthen security controls.
-Security Compliance & Audit: Support cybersecurity audits, maintain audit evidence, track remediation actions, and ensure alignment with ISO 27001, NIST, and internal security policies.
-Incident, Problem & Change Management: Handle security and logging incidents, conduct root-cause analysis, follow approved change procedures, and maintain operational documentation.
-System Onboarding & Security Monitoring: Onboard IT systems into Graylog, monitor security alerts, investigate suspicious activities, and support security incident response.
-Graylog & Log Management: Administer and optimize the Graylog platform, ensuring effective log collection, processing, retention, alerting, and monitoring.
-User Access Management (UAM/PAM): Manage user and privileged accounts, access provisioning, access reviews, and access governance to ensure compliance with security policies.

Job Requirements

-Bachelor’s degree in IT, Computer Science, Cybersecurity, CompTIA Security+/CySA+
-Certified SOC Analyst (CSA)
-2+ years working in a SOC (Security Operation Center), IT security, or compliance role.
-Hands-on experience with SIEM or log management tools (especially Graylog, ELK, or Splunk)
-Basic understanding of cloud computing concepts
-Good understanding of Active Directory, Azure AD/Entra ID, RBAC (Role-Based Access Control), and PAM concepts
-Basic scripting knowledge
-Understanding of basic networking fundamentals
-Basic understanding of monitoring and logging concepts