We have a new opportunity for "Cybersecurity Operations Engineer " with our client. Interested candidates send me your CV to [email protected]
Title : Cybersecurity Operations Engineer
Location : Jordan
Duration 12 Months
Role Purpose
- Manage and coordinate Agthia's day-to-day cybersecurity operations, acting as the primary internal owner for SOC alerts, incidents and security tickets. Ensure security events are appropriately investigated, prioritized, escalated, remediated and closed while continuously improving detection, response and operational security capabilities across the Group.
Key Accountabilities & KPIs
- SOC Operations & Ticket Management
- Own and manage cybersecurity tickets and incidents raised by the SOC/MSSP.
- Review SOC investigations and validate severity, impact, evidence and recommended actions.
- Prioritize and coordinate remediation activities with Infrastructure, Network, Applications, Cloud, OT and other relevant teams.
- Track incidents and security tickets through investigation, containment, remediation and formal closure.
- Ensure critical and high-severity incidents are escalated according to defined procedures and SLAs.
- Challenge and escalate incomplete or inadequate SOC investigations when required.
KPIs:
- SOC ticket SLA compliance
- Mean time to acknowledge and resolve
- Critical/high incident closure rate
- Reduction in aged/open security tickets
Qualifications, Experience & Skills
- Bachelor's degree in Cybersecurity, Information Security, Computer Science or related discipline.
- 5+ years of experience in cybersecurity operations, SOC, incident response or security engineering.
- Hands-on experience with SIEM, EDR/XDR, email security, vulnerability management and network-security technologies.
- Strong understanding of incident investigation, log analysis, threat detection and response.
- Experience managing SOC or MSSP escalations and security incidents.
- Knowledge of MITRE ATT&CK, threat hunting, incident-response methodologies and security monitoring principles.
- Experience with Microsoft security technologies, CrowdStrike, Qualys, Mimecast, Fortinet or similar enterprise security platforms is preferred.
- Scripting or security automation experience using PowerShell, Python or similar technologies is an advantage.
- Relevant certifications such as Security+, CySA+, GCIH, SC-200, GCIA or equivalent are preferred.
Interested candidates send me your CV with below details.
Expected salary:
Notice Period:
Current Location:
Citizen / Visa Status / Work Permit:
