Role
The Day-To-Day Activities
Security Engineering
• Assist with the deployment, configuration, tuning, and maintenance of security technologies including SIEM, EDR/XDR, IAM/PAM, WAF, CSPM, DLP, and vulnerability management platforms.
• Support security architecture reviews and help ensure projects adopt secure-by-design principles.
• Work closely with infrastructure, cloud, network, DevOps, and application teams to implement secure configurations and remediation plans.
• Maintain baseline configurations, hardening guides, and technical standards for security tools and platforms.
Operational & Technical Administration
• Monitor health, performance, and coverage of security tools; escalate issues and drive corrective actions.
• Support integration of security tools into enterprise systems, including automation and workflow enhancements.
• Assist with building and maintaining engineering documentation, runbooks, deployment procedures, and knowledge bases.
• Provide Tier 2/3 technical support during security incidents and collaborate with SOC teams for investigation and remediation.
Project and Implementation Support
• Participate in evaluating new security technologies and coordinate proof-of-concepts (POCs).
• Contribute to solution comparisons, vendor assessments, and technical scoring.
• Assist in project planning, tracking deliverables, and reporting status updates to management.
Governance, Compliance & Risk Support
• Provide technical input for compliance initiatives (ISO 27001, NIST, CIS Controls, local regulations).
• Ensure security tools and configurations meet regulatory and audit requirements.
• Assist with evidence collection and technical responses during internal/external audits.
Budget, Procurement & Reporting Support
• Support the manager in preparing budget inputs, cost breakdowns, license tracking, and vendor quotations.
• Assist in drafting proposals, business cases, and financial justification documents.
• Prepare slides, summaries, and dashboards for management reporting and steering committee updates.
• Track contract renewals, subscription usage, and cost optimization opportunities.
Stakeholder Engagement
• Collaborate with cross-functional teams to provide technical security guidance.
• Coordinate with vendors, managed service partners, and solution providers for support or implementation needs.
• Communicate technical issues, risks, and recommendations in clear, actionable terms.