Cyber Security Engineer

About the role

The Cyber Security Engineer will protect the organisation's classified computers and systems by overseeing security operations, managing incidents, and ensuring compliance with internal and external standards. This role focuses on N2 and N3 level assets and requires a proactive approach to risk mitigation.

Key responsibilities

• Perform log reviews and change management on classified systems, maintaining audit‑ready records.
• Conduct cyber risk assessments, vulnerability scans (VA), and remediation activities.
• Manage cyber security incidents from detection through resolution and follow‑up.
• Deliver cyber hygiene awareness and education to end‑users.
• Support internal and external compliance audits, ensuring adherence to security policies and governance frameworks.
• Enforce data security, encryption, and secure configuration via Group Policy Objects (GPOs).
• Develop and archive security processes, SOPs, and documentation for compliance.
• Coordinate external audits, risk assessments, and regulatory submissions.

Required profile

• Relevant security certifications such as CSSA+, CEH, CompTIA Security+, CISA, CISM, ISO 27001 Internal Auditor or Lead Implementer, CISSP, or GCIH.
• Experience with security operations, incident handling, and compliance frameworks.

Required skills

• Log review and analysis
• Change management and audit documentation
• Cyber risk assessment
• Incident management and response
• Vulnerability management and VA scanning
• Data encryption and security controls
• Group Policy Object (GPO) configuration
• Security audit planning and reporting