Cyber Security Engineer

Security Monitoring & Threat Detection

• Monitor IT and OT environments using SIEM tools and dashboards to identify, investigate, and escalate security incidents, anomalies, and vulnerabilities in real time
• Maintain situational awareness through continuous event analysis and reporting, providing timely summaries and insights to support proactive threat detection and response

Incident Response & Investigation

• Support incident detection, triage, containment, and investigation activities, collecting evidence and documenting findings in alignment with established response playbooks
• Contribute to post-incident reviews and recommend improvements to strengthen prevention, detection, and response processes

Vulnerability Management & Remediation

• Perform scheduled and ad-hoc vulnerability assessments across IT and OT systems, supporting prioritization, remediation planning, and patch validation
• Track remediation progress, verify system hardening, and maintain metrics to ensure timely risk reduction

Security Tool Configuration & Maintenance

• Configure, update, and maintain security tools and agents across IT and OT environments, ensuring reliable deployment and integration
• Troubleshoot tool performance issues, escalate complex problems, and maintain clear documentation of configurations and operational procedures

OT Security Operations

• Apply OT/ICS security principles to monitor and protect industrial control systems, supporting threat identification across IT and OT environments
• Collaborate with OT and engineering teams to assess security gaps, recommend mitigations, and participate in risk assessments for critical systems
• Develop and maintain OT security documentation, including playbooks, runbooks, architectures, and incident response records
• Support compliance efforts by preparing evidence and documentation for audits and contributing to continuous improvement initiatives

Cross-Functional Collaboration

• Work closely with IT, OT, and business teams to integrate security into operational processes
• Communicate security findings to technical and non-technical stakeholders in clear, actionable terms
• Participate in security training initiatives and knowledge-sharing sessions
• Contribute to vendor evaluations, security tool assessments, and technology recommendations

Continuous Learning & Development

• Stay current with security trends, emerging threats, and new attack vectors through training and research
• Participate in security labs, tabletop exercises, and hands-on training opportunities
• Mentor and seek mentorship from senior team members to accelerate skill development