Operator Security Engineer

About the role

The Operator Security Engineer monitors security systems, detects and responds to cyber threats, manages security tools, and helps ensure the confidentiality, integrity, and availability of company systems and data.

Responsibilities

• Monitor security alerts using SIEM and other security monitoring tools.
• Detect, investigate, and respond to security incidents.
• Perform vulnerability assessments and support remediation efforts.
• Monitor firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Analyze logs and identify suspicious activities.
• Manage user access, authentication, and security policies.
• Support incident response and forensic investigations.
• Ensure compliance with security standards and company policies.
• Maintain security documentation and prepare incident reports.
• Work with IT and operations teams to strengthen security controls.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 1–3 years of experience in IT support, network operations, or cybersecurity (for entry-level roles, internships or relevant training may be accepted).

Skills

• Knowledge of networking (TCP/IP, DNS, VPN, Firewalls).
• Understanding of cybersecurity concepts and attack techniques.
• Experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel).
• Familiarity with endpoint security and antivirus solutions.
• Knowledge of Windows and Linux operating systems.
• Basic scripting skills (PowerShell, Bash, or Python) are an advantage.
• Understanding of cloud security (AWS, Azure, or Google Cloud) is beneficial.

Preferred Certifications

• CompTIA Security+
• CompTIA Network+
• Certified Ethical Hacker (CEH)
• Cisco Certified CyberOps Associate
• Microsoft Security certifications
• ISC2 Certified in Cybersecurity (CC)