Cyber Security Engineer

About the role

We are looking for a Cyber Security Engineer to own detection, vulnerability management, and threat intelligence processes. You will act as the bridge between our security tooling (Qualys, Palo Alto SIEM/XDR, CloudSEK) and our outsourced MDR partner, ensuring alerts are triaged, findings are remediated, and red‑team exercises are coordinated.

Key responsibilities

• Manage the MDR partner relationship: handle escalations, monitor alert quality, and provide detection‑tuning feedback.
• Schedule Qualys scans, triage findings, assign severity scores, and track remediation against SLAs, automating ticket creation where possible.
• Oversee CloudSEK threat‑intel alerts, assign clear owners, and integrate feeds into the MDR triage queue.
• Coordinate red‑team and purple‑team engagements with the MDR partner after the first quarter of live monitoring.
• Support penetration‑test remediation verification and respond to auditor evidence requests.
• Build lightweight automation for auto‑ticketing, severity‑based routing, and auto‑close of verified rescans.
• Identify detection or coverage gaps and alert the Security Lead, especially for regulatory notifications.

Required profile

• 3–6+ years of experience in security operations, detection engineering, or vulnerability management.
• Hands‑on experience with a SIEM/XDR platform (preferably Palo Alto Cortex) and a vulnerability scanner (preferably Qualys).
• Proven track record managing an MDR/MSSP relationship and holding partners accountable to SLAs.
• Ability to own an end‑to‑end triage process, ensuring findings are fixed, not just scanned.
• Familiarity with coordinating external red‑team, purple‑team, or penetration‑test engagements.

Required skills

• Qualys vulnerability management
• Palo Alto Cortex (SIEM/XDR)
• CloudSEK threat‑intel platform
• MDR/MSSP partnership management
• Automation of ticketing and remediation workflows