Cybersecurity Engineer (SIEM/EDR/Cloud Native Security)

Our client is a public sector technology organisation looking for an IT Security Officer/Cybersecurity Engineer with 4+ years of cybersecurity experience to support the security operations, engineering, and defence of government systems. Responsibilities • Perform cybersecurity operational activities including security reporting, dashboarding, compliance documentation, and security control implementation. • Review and validate VAPT findings, support remediation planning, and track security vulnerabilities. • Participate in threat modelling and security reviews to identify requirements and appropriate controls. • Conduct periodic IAM reviews to ensure appropriate access and least-privilege principles. • Support security incident response, alert triage, investigation, and escalation across SIEM, EDR, and cloud security platforms. • Assist with threat hunting and improve detection rules, incident playbooks, and response runbooks. • Apply security controls across CI/CD pipelines, Kubernetes platforms, cloud environments, and other technology platforms. • Perform security analysis of code and cloud environments and support remediation of identified findings. • Develop POCs and evaluate new cybersecurity tools and technologies in lab environments. • Automate security processes and workflows using scripting tools such as Python or Bash. • Work closely with security, engineering, product teams, and stakeholders to improve overall security posture. Requirements • At least 4 years of relevant cybersecurity experience. • Degree in Cybersecurity, Computer Science, Computer/Electronics Engineering, Information Technology, or a related discipline. • Strong foundational knowledge of security architecture, secure system design, threat modelling, and vulnerability management. • Experience or exposure to CI/CD security, Kubernetes, cloud security, IAM, secrets management, and Zero Trust principles. • Familiarity with SIEM, EDR, cloud-native security monitoring, incident response, and threat hunting. • Scripting or automation experience with Python, Bash, or similar tools. • Ability to work independently, troubleshoot issues, and escalate appropriately. • Strong communication and collaboration skills, with a proactive approach to improving security processes. • Certifications such as OSCP, CISSP, or other relevant cybersecurity certifications will be a plus.