L2 Cybersecurity Engineer (Ref 26505)

Your tasks

• Monitors assigned security queues, alerts, findings, incidents and requests and responds within agreed SLA.

• Supports certificate lifecycle management activities, including operational tracking and approved renewal or replacement actions.

• Performs IAM/PAM operational tasks and supports CyberArk administration within approved procedures and access authority.

• Supports EPP/EDR operations, investigates alerts and coordinates containment or remediation actions in accordance with runbooks.

• Reviews vulnerability findings and supports remediation tracking and validation with relevant resolver groups.

• Performs account and access reviews and documents identified exceptions or required follow-up actions.

• Reviews AWS Security Hub and Inspector findings, performs initial analysis and routes or tracks remediation actions.

• Performs security monitoring and log analysis to support incident identification and investigation.

• Supports incident response activities by gathering evidence, recording actions, escalating appropriately and maintaining clear communication.

• Updates tickets with accurate investigation details, actions taken, evidence and resolution status.

• Executes approved security changes with proper risk, validation and backout information.

• Maintains security runbooks and knowledge articles and contributes to improvement of repeatable operational processes.

• Communicates with clients, internal teams and third parties when extending support or coordinating remediation.

• Performs any other related task as required.

Requirements

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).

• 4+ years of overall relevant experience.

• 3+ years of experience in Security Operations, IAM/PAM, EDR/EPP and vulnerability management.

• Hands-on experience with certificate lifecycle management, IAM/PAM, CyberArk, EPP/EDR, vulnerability remediation and account/access reviews.

• Experience with AWS Security Hub/Inspector findings, security monitoring, log analysis and incident response.

Certifications relevant to the services provided carry additional weightage on a candidate’s qualification for the role.

Required certification(s) CompTIA Security+, GSEC, or equivalent certification.

Good-to-have certification(s)

• CyberArk Defender.

• AWS Certified Security - Specialty.

• Relevant vendor EDR/EPP certification.

Other

Licence no: 12C6060