IT Cybersecurity Project Lead

About the role

The Cybersecurity Operations Engineer is responsible for implementing, operating, monitoring, and continuously improving cybersecurity controls across the organization’s IT and OT environments. The role focuses on security monitoring, incident response, vulnerability management, endpoint and identity security, and tooling administration.

Key responsibilities

• Monitor security events and alerts, investigate suspicious activities, and perform incident triage, containment, eradication, and recovery.
• Administer and maintain SIEM platforms, develop detection rules, and ensure comprehensive log coverage.
• Manage Endpoint Detection and Response (EDR/XDR) solutions, monitor endpoint threats, and support server hardening.
• Conduct vulnerability scanning, analyze assessment reports, prioritize remediation, and track closure of findings.
• Support privileged access management, monitor privileged account usage, and assist with access reviews.
• Administer a range of security tools including SIEM, EDR/XDR, PAM, vulnerability platforms, email and web security solutions.
• Monitor emerging threats, review threat intelligence feeds, and support threat‑hunting activities.
• Assist with cybersecurity monitoring of OT environments, implement IEC 62443‑aligned controls, and participate in OT risk assessments.
• Help design and implement cybersecurity policies, support audits, and maintain compliance evidence for frameworks such as NIST, ISO 27001 and IEC 62443.
• Prepare operational reports, dashboards, and KPI updates for senior leadership.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related field.
• 3–5 years of experience in cybersecurity operations, including incident response and security monitoring.
• Proven experience supporting enterprise security technologies and conducting vulnerability management.
• Hands‑on experience investigating cybersecurity incidents and managing security tooling.

Required skills

• Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike, Trend Micro.
• Tenable, Qualys, Rapid7, Splunk, QRadar.
• Windows Server, Active Directory, Entra ID (Azure AD), Linux administration.
• Firewalls, VPN technologies, Azure, Microsoft 365 Security, AWS security fundamentals.
• Industrial Control Systems (ICS), SCADA, IEC 62443, OT network security.