Job Title

Position SummaryThe Cybersecurity Engineer delivers and supports operational security services and tools within defined timeframes and with high quality, while providing technical expertise in both offensive and defensive cybersecurity areas. This role requires the ability to interact with internal and external peers in IT, Security, Risk, Compliance, and Operations teams, vendors, and third-party support organizations. The engineer will participate in advisory boards, incident management cases, and contribute to both protecting the organization's assets and identifying vulnerabilities through offensive security techniques.Functional ResponsibilitiesDesign, implement, and maintain security tools, systems, and solutions in collaboration with the Security Engineering, Operations, and Architecture teams.Ensure proper operation of assigned security tools and systems, collaborating with other teams to update, maintain, and improve their capabilities.Create and maintain documentation, diagrams, and workflows for assigned systems.Analyze logs, threat intelligence, and other data sources as part of incident detection, investigation, resolution, and reporting.Develop and implement security policies, procedures, and best practices to protect against emerging threats.Support the assessment of impact and interconnectivity with other systems, tools, processes, and workflows.Follow approved team and company processes and procedures, particularly the Incident Management and Change Management lifecycles.Manage and optimize security infrastructure including firewalls, IDS/IPS, EDR, and SIEMMonitor and respond to security incidents using SIEM and other security toolsImplement and maintain security controls and defensive measuresPerform threat hunting and malware analysisConduct investigations and incident responseCreate and maintain security documentation, playbooks, and workflowsEnsure compliance with security policies, standards, and regulatory requirementsParticipate in threat intelligence sharing and analysis