Security Engineer
Must-have:CloudSecurity
Your tasks
Technical Support and Incident Resolution
- Provide second-level technical support for enterprise security solutions and customer environments.
- Investigate, troubleshoot, and resolve complex security incidents and technical issues escalated from first-level support.
- Perform system diagnostics, security log analysis, network traffic analysis, and root-cause analysis.
- Resolve technical issues within agreed Service Level Agreements (SLAs) and escalate unresolved cases appropriately.
- Provide technical guidance and support to first-level engineers.
Security Solution Administration
- Install, configure, upgrade, and maintain enterprise cybersecurity platforms.
- Conduct routine system health checks and preventive maintenance
- Monitor security platform availability, performance, capacity, and operational health.
- Validate security policies, rules, integrations, and system configurations.
- Support backup, restoration, disaster recovery, and high-availability activities where required.
Deployment and Project Support
- Support the implementation, deployment, and integration of enterprise security solutions.
- Participate in Proof of Concept (PoC) and Proof of Value (PoV) activities,solution testing, and customer demonstrations.
- Assist with acceptance testing, post-deployment validation, system upgrades,and platform optimisation.
- Collaborate with project teams and solution architects to ensure successful implementation of security technologies.
OEM and Vendor Management
- Engage Original Equipment Manufacturers (OEMs) and vendor technical support teams to resolve complex product-related issues.
- Provide diagnostic logs, configuration details, and relevant troubleshooting evidence during escalations.
- Track escalated cases through to resolution and implement approved fixes or workarounds.
- Document vendor recommendations and ensure timely resolution of technical issues in line with agreed SLAs.
Documentation and Reporting
- Maintain accurate technical documentation, troubleshooting guides, runbooks,and knowledge-base articles.
- Prepare incident reports, root-cause analysis reports, and technical service updates.
- Maintain records of incidents, system changes, configurations, and maintenance activities.
- Contribute to knowledge sharing and continuous improvement within the Enterprise Security team.
Customer Engagement and Service Delivery
- Provide clear and timely technical updates to customers regarding reported issues and their resolution.
- Participate in customer meetings, technical workshops, service reviews, and knowledge-transfer sessions.
- Ensure customer issues are handled professionally and resolved within agreed timelines.
- Collaborate with L1 engineers, L3 engineers, solution architects, project teams, and service delivery teams to maintain effective service delivery.
Security Monitoring and Platform Maintenance
- Monitor the performance and effectiveness of deployed security solutions.
- Support security technologies, including SIEM, EDR/XDR, DLP, IAM/PAM, WAF,DAM, NDR, and vulnerability management solutions.
- Identify system faults, configuration issues, and performance gaps that may affect security operations.
- Participate in planned maintenance, after-hours support, and on-call activities when required.
Requirements
- HND in Computer Science, Information Technology,
- Cybersecurity, Computer Engineering, or a related discipline.
- 3–5 years of relevant experience in cybersecurity engineering, security operations, or enterprise security technical support.
- Demonstrable experience supporting and troubleshooting enterprise security solutions.
- Good understanding of TCP/IP, DNS, routing, switching, VPNs, firewalls, and network traffic analysis.
- Working knowledge of Windows and Linux operating systems.
- Experience analysing security logs, investigating incidents, and resolving technical issues.
- Strong analytical, troubleshooting, communication, and customer service skills.
- Ability to work independently, manage competing priorities, and collaborate effectively within a technical team.
Preferred Technical Skills Experience with one or more of the following will be an advantage:
- Security Information and Event Management (SIEM)
- Endpoint Detection and Response (EDR/XDR)
- Data Loss Prevention (DLP)
- Identity and Access Management (IAM) / Privileged Access Management (PAM)
- Web Application Firewall (WAF) and Database Activity Monitoring (DAM)
- Network Detection and Response (NDR)
- Vulnerability and cloud security management
- Security orchestration and automation
Preferred Certifications Relevant certifications will be an added advantage, including:
- CompTIA Security+ or CySA+
- Certified SOC Analyst (CSA) or Certified Ethical Hacker (CEH)
- Microsoft Security certifications
- Fortinet NSE/FCP Security certifications
- Palo Alto Networks certifications
- Cisco CyberOps Associate
- Vendor-specific certifications in enterprise security technologies