Cybersecurity Support Engineer – L2

About the role

The L2 Cybersecurity Support Engineer will protect Thales’ data and systems by managing security infrastructure, monitoring alerts, and responding to incidents. You will work closely with IT, development, and senior security teams to ensure a resilient security posture.

Key responsibilities

• Investigate and respond to security incidents escalated from L1, performing root‑cause analysis.
• Monitor security alerts from SIEM platforms (e.g., QRadar) and dashboards.
• Conduct vulnerability assessments and coordinate penetration testing.
• Implement, configure, troubleshoot, and maintain firewalls (Palo Alto, Fortigate, Check Point), IDS/IPS, EDR/AV, CipherTrust, HSM, 2FA, PAM, IBM Guardium, and Rapid7.
• Develop and enforce security policies, procedures, and documentation.
• Perform proactive threat hunting to uncover hidden malware and vulnerabilities.
• Collaborate with IT, development, and L3 teams; mentor junior L1 staff.
• Prepare detailed incident reports for management and compliance.
• Participate in a 24/7 on‑call rotation and provide onsite support when required.

Required profile

• Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent experience.
• 3+ years of experience in cybersecurity or information security, with at least 1‑2 years in L2 support for mission‑critical systems.
• Strong understanding of network protocols, TCP/IP, and security concepts.
• Familiarity with IT Service Management (ITSM) standards is a plus.

Required skills

• SIEM (QRadar) monitoring and analysis.
• Firewall technologies: Palo Alto, Fortigate, Check Point.
• IDS/IPS, EDR/AV solutions.
• CipherTrust tokenization, HSM, 2FA, PAM.
• IBM Guardium and Rapid7 security tools.
• Vulnerability assessment and penetration testing coordination.
• Linux and Windows operating systems.
• Cloud security concepts.