Cybersecurity Engineer

About the role

This client‑facing position blends hands‑on SIEM engineering with strategic security advisory. You will act as a trusted subject‑matter expert, helping clients mature their detection and response capabilities by tuning security content, closing visibility gaps, and translating technical findings into actionable business guidance.

Key responsibilities

• Design and tune detection logic within enterprise SIEM platforms to address identified security gaps.
• Lead regular strategic briefings with client leadership on detection coverage, incident trends, and program maturity.
• Develop and refine incident response playbooks and procedures in collaboration with client security teams.
• Execute proactive threat‑hunting activities across SIEM and EDR data to uncover sophisticated adversary activity.
• Map threat‑actor tactics and techniques to industry‑standard frameworks (e.g., MITRE ATT&CK) to assess and improve detection coverage.
• Translate technical malware and forensic findings into clear, actionable recommendations for non‑technical stakeholders.
• Generate comprehensive metrics and reporting on incident response activity and program performance for executive review.

Required profile

• 5+ years of experience in cybersecurity, including hands‑on work with enterprise SIEM platforms.
• At least 1 year in a SOC analyst or detection‑engineering role.
• Proven ability to perform log analysis and author or tune detection logic.
• Practical knowledge of the MITRE ATT&CK framework and cloud‑based technologies.
• Strong client‑facing communication skills with experience presenting to leadership.
• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.

Required skills

• Enterprise SIEM platforms
• EDR and NDR tools
• MITRE ATT&CK framework
• Cloud technologies
• Python scripting
• Threat hunting
• Log analysis