G02 - IT Security Officer (Cybersecurity Engineer)

Responsibilities

• Perform routine reporting, dashboarding, and automation activities
• Support validation and remediation of VAPT findings
• Review security vulnerabilities identified through assessments
• Refine incident response playbooks and operational processes
• Support compliance documentation and evidence collection
• Implement security controls and operational security tasks
• Participate in threat modelling exercises and identify security requirements
• Conduct periodic IAM role reviews to enforce least privilege access
• Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments
• Support incident response and escalate complex issues when required
• Perform alert triage and assist with security investigations
• Improve detection rules, response playbooks, and runbooks
• Support guided threat hunting activities
• Deliver POCs and security-focused product enhancements
• Utilise code and cloud security analysis tools to remediate findings
• Recommend improvements to enhance security, scalability, and maintainability
• Conduct testing and evaluation of cybersecurity tools in lab environments
• Support proof-of-concept initiatives and document findings
• Work closely with internal stakeholders and technical teams
• Share knowledge and contribute to continuous improvement initiatives
• Support team effectiveness through proactive collaboration

Requirements

• Knowledge of security architecture, secure system design, and threat modelling
• Familiarity with vulnerability validation and remediation processes
• Experience securing CI/CD platforms, Kubernetes, and cloud environments
• Exposure to developer productivity tools, including AI-assisted coding workflows
• Familiarity with SIEM platforms, EDR tools, and cloud-native security monitoring
• Understanding of incident response, detection engineering, and threat hunting
• Scripting or automation experience using Python or Bash
• Understanding of IAM, secrets management, and Zero Trust principles
• Able to work independently with minimal supervision
• Strong problem-solving and escalation judgement
• Adaptable to changing priorities and project requirements
• Good stakeholder management and collaboration skills
• Positive attitude towards knowledge sharing and teamwork

Education & Experience

• Degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or related disciplines
• Relevant cybersecurity experience or demonstrated technical capability is preferred

Preferred Certifications

• OSCP
• CISSP
• Other relevant cybersecurity certifications