L2 Cybersecurity Engineer (Ref 26505)

Responsibilities:

- Monitors assigned security queues, alerts, findings, incidents and requests and responds within agreed SLA.

- Supports certificate lifecycle management activities, including operational tracking and approved renewal or replacement actions.

- Performs IAM/PAM operational tasks and supports CyberArk administration within approved procedures and access authority.

- Supports EPP/EDR operations, investigates alerts and coordinates containment or remediation actions in accordance with runbooks.

- Reviews vulnerability findings and supports remediation tracking and validation with relevant resolver groups.

- Performs account and access reviews and documents identified exceptions or required follow-up actions.

- Reviews AWS Security Hub and Inspector findings, performs initial analysis and routes or tracks remediation actions.

- Performs security monitoring and log analysis to support incident identification and investigation.

- Supports incident response activities by gathering evidence, recording actions, escalating appropriately and maintaining clear communication.

- Updates tickets with accurate investigation details, actions taken, evidence and resolution status.

- Executes approved security changes with proper risk, validation and backout information.

- Maintains security runbooks and knowledge articles and contributes to improvement of repeatable operational processes.

- Communicates with clients, internal teams and third parties when extending support or coordinating remediation.

- Performs any other related task as required.

Requirements:

- Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).

- 4+ years of overall relevant experience.

- 3+ years of experience in Security Operations, IAM/PAM, EDR/EPP and vulnerability management.

- Hands-on experience with certificate lifecycle management, IAM/PAM, CyberArk, EPP/EDR, vulnerability remediation and account/access reviews.

- Experience with AWS Security Hub/Inspector findings, security monitoring, log analysis and incident response.

Certifications relevant to the services provided carry additional weightage on a candidate’s qualification for the role.

Required certification(s):

CompTIA Security+, GSEC, or equivalent certification.

Good-to-have certification(s):

- CyberArk Defender.

- AWS Certified Security - Specialty.

- Relevant vendor EDR/EPP certification.

Licence no: 12C6060