Senior Cyber Security Engineer

Job Purpose
The Senior Cyber Security Engineer plays a crucial role in safeguarding the organization's digital assets. The position is responsible for designing, implementing, and maintaining IT security infrastructure to prevent, detect, and manage cyber threats. The role calls for deep knowledge of network and software security vulnerabilities, together with strong incident-response and risk-management skills. Working closely with teams across the organisation, the Senior Cyber Security Engineer helps develop and enforce security policies, conduct security audits, and ensure compliance with regulatory standards.
Job Dimensions
Reports to: IT Security Manager
Direct reports: 3
Indirect reports: 0
Function: Cybersecurity / Security Operations
Key Accountabilities
Security Configuration, Monitoring & Management
Configure, fine-tune, and maintain security tools and technologies, including SIEM, email security gateway, and advanced threat-detection systems.
Lead and supervise the monitoring of security events and logs to identify suspicious activity and potential threats.
Direct the SecOps team during incident-response efforts, ensuring rapid containment and mitigation of threats.
Proactively hunt for undetected threats in the environment, applying knowledge of the latest attacker techniques and tools.
Aggregate logs from multiple sources into a centralized SIEM system.
Develop and implement correlation rules to identify complex threats, and customize alerts for events that warrant immediate action.
Periodically review and update security policies, particularly after an incident or a major change in the environment.
Analyze and recommend security controls and procedures across the acquisition, development, and change-management lifecycle of information systems, and monitor for compliance.
Governance
Contribute to the creation, review, and updating of IT security policies, procedures, and protocols, keeping them aligned with current industry best practices and regulatory requirements.
Monitor and enforce compliance with security policies and procedures, providing guidance to ensure adherence to frameworks such as ISO 27001 and NIST.
Oversee and evaluate the effectiveness of security measures, recommending improvements and ensuring quality control throughout.
Promote security awareness across the organization and help develop and deliver security-training programs for staff.
Perform routine security audits of the infrastructure and present findings.
Reporting & Documentation
Develop and maintain comprehensive documentation for all incident-response activities.
Analyze historical data to identify trends and anticipate potential future threats.
Craft clear, strategic, and technical reports for executive leadership, providing insight into security operations and the threat landscape.
Support internal and external audits by preparing the necessary documentation and evidence.
Develop and maintain metrics and dashboards to track the performance and effectiveness of the cybersecurity program.
Problem Resolution & Troubleshooting
Provide guidance and support to junior team members in resolving complex issues.
Conduct in-depth root-cause analyses for security incidents and system compromises.
Collaborate with IT and network teams to develop and implement fixes and long-term solutions to security challenges.
Continuously improve the incident-resolution process through automation, process refinement, and tool upgrades.
Training & Development
Ensure all certifications required for the role are met within 6 months of joining and kept valid thereafter.
Maintain knowledge across all relevant areas of security administration and expand specialist knowledge as required.
Stay current with the field through continuous learning and participation in technical events.
Span of Communication
Internal: FutureX internal teams
External: Customers
Qualifications, Experience & Skills
Required Qualifications & Certifications
CompTIA Security+
Cisco Certified Network Associate (CCNA) Security
EC-Council Certified Ethical Hacker (CEH)
Certified Information Systems Security Professional (CISSP)
(Certifications must be held or obtained within 6 months of joining.)
Required Experience
6–8 years of experience in cybersecurity
Required Skills
Ability to analyse and interpret complex information from various sources and understand its impact on IT security operations
Fluent spoken and written English
Ability to articulate technical information effectively to a range of audiences, including non-technical stakeholders
Proven leadership skills, with the ability to guide, mentor, and motivate a team of analysts
Effective time management and the ability to prioritise tasks in a high-pressure environment
Job-Specific Skills & Competencies
Technical Competencies
Advanced knowledge of SIEM
Forensic analysis
Network security
Endpoint security
Threat modelling
Compliance and risk management
Other Requirements
Vendor certifications for widely used security tools and technologies are beneficial
Some travel and possible project work at customers' offices
Some out-of-hours work

Work arrangement
No