{"id":2834418,"url":"https://alion.io/job/smart-axiata-cybersecurity-operations-engineer","title":"Cybersecurity Operations Engineer","company":{"id":49715,"name":"Smart Axiata","domain":"smart.com.kh","url":"https://alion.io/company/smart-axiata","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Phnom Penh, Cambodia"],"countries":["KH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":8500,"max_usd":24000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":575},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Graylog","optional":false},{"name":"Incident Management","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-19T04:48:01Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-22T16:21:37Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Job Purpose\nThis role is responsible for supporting the day-to-day operation, monitoring, administration and continuous improvement of the organization's Security Operations Center and security monitoring capabilities. You bridge the gap between cybersecurity operations, IT infrastructure, and compliance.\nThe role focuses on security event monitoring, log management, UAM/PAM governance, access review, security incident support, security tools administration, systems onboarding, security reporting and audit compliance.\nThis role works closely with Infrastructure, Network, Cloud, DevOps, Cybersecurity, Risk, Internal Audit, external auditors and technology partners to ensure security events and access activities are appropriately monitored, investigated, documented and managed.\nThe position contributes to the organization's cybersecurity and operational resilience objectives in alignment with ISO/IEC 27001, NIST Cybersecurity Framework (NIST CSF), NIST SP 800-series guidance and ITIL practices.\nJob Responsibilities\n1. UAM / PAM & Access Governance\nAdminister and support UAM/PAM processes, ensuring least-privilege, segregation of duties and approved access controls.\nReview and manage user, privileged, administrative and service accounts throughout their lifecycle.\nMonitor privileged access and identify unauthorized or anomalous activities.\nGenerate, coordinate and submit periodic User Access Reviews (UAR) for management and audit sign-off.\nEnsure timely access provisioning, modification and revocation, including role changes and employee departures.\nMaintain access approvals, review evidence and audit-ready documentation; escalate exceptions and overdue actions.\n2. Graylog Administration & Log Management\nAdminister, maintain and optimize the Graylog centralized log management platform, including availability, performance, capacity, storage and retention.\nManage log sources, inputs, collectors, streams, pipelines, extractors, parsing rules, dashboards and alerts.\nConfigure and maintain log parsing, normalization and real-time security alerting/use cases.\nTroubleshoot log ingestion, parsing, indexing and connectivity issues.\nEnsure critical infrastructure, network, security, application, cloud and database logs are collected and retained according to security requirements.\n3. System Onboarding & Security Monitoring\nManage onboarding of servers, network devices, security platforms, applications, databases and cloud systems into Graylog.\nCoordinate with system owners to define logging requirements, forwarding methods, retention and security events.\nValidate log connectivity, data quality and monitoring coverage after onboarding.\nMaintain an accurate log-source/system inventory and identify gaps against the security monitoring baseline.\nPerform day-to-day security monitoring, alert triage and analysis across infrastructure, network, cloud and applications.\nIdentify suspicious or abnormal activities, assess risk and escalate potential security incidents in accordance with incident response procedures.\nSupport investigation, containment, remediation and post-incident activities.\n4. Security Incident, Problem & Change Management\nManage security monitoring and logging incidents in accordance with ITIL-aligned Incident Management processes.\nSupport investigation, root-cause analysis and Problem Management for recurring security or logging issues.\nEnsure changes to Graylog, monitoring rules, integrations and security configurations follow approved Change Management procedures.\nMaintain accurate incident records, SOPs, knowledge articles, system diagrams and operational documentation.\nParticipate in security drills, incident simulations and operational readiness activities.\n5. Security Compliance, Audit & Risk\nSupport internal and external audits covering cybersecurity, UAM/PAM, logging, monitoring and infrastructure security.\nPrepare and provide audit evidence, access records, logs, configurations, reports and other supporting documentation.\nTrack security audit findings, remediation actions and outstanding control gaps through closure.\nEnsure security operations align with ISO/IEC 27001, NIST, internal security policies and applicable regulatory requirements.\nSupport continuous improvement of security controls, procedures and monitoring capabilities.\n6. Stakeholder & Technical Collaboration\nWork closely with Cybersecurity, Network, Infrastructure, Cloud, Database, Application, DevOps, HR, Risk, Compliance and Audit teams.\nCoordinate with system owners to resolve logging, access control and security monitoring gaps.\nProvide security monitoring and logging requirements for new systems, projects, migrations and technology implementations.\nSupport security assessments, vulnerability remediation and infrastructure security-hardening activities where required.\nLiaise with technology vendors and external security service providers as required.\n7. Reporting & Management Information\nPrepare regular SOC, security monitoring, UAM/PAM and compliance reports.\nReport security alerts, incidents, log-source availability, onboarding status, access review completion, monitoring gaps and outstanding risks.\nMaintain dashboards and KPIs providing management visibility of security performance and security posture.\nProvide inputs for management, risk committee, audit and cybersecurity governance reporting.\nJob Requirements\nBachelor’s degree in IT, Computer Science, Cybersecurity, CompTIA Security+/CySA+\nCertified SOC Analyst (CSA)\n2+ years working in a SOC (Security Operation Center), IT security, or compliance role.\nHands-on experience with SIEM or log management tools (especially Graylog, ELK, or Splunk)\nBasic understanding of cloud computing concepts\nGood understanding of Active Directory, Azure AD/Entra ID, RBAC (Role-Based Access Control), and PAM concepts\nBasic scripting knowledge\nUnderstanding of basic networking fundamentals\nBasic understanding of monitoring and logging concepts","description_format":"text","description_chars":5963,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Mobile Networks","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-19T04:48:01Z"}],"visa":[],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.839,"p_room":1,"age_days":4,"expected_fill_days":12,"reasons":["conf:13","velocity","win:early","comp:junior,attention"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/smart-axiata-cybersecurity-operations-engineer","json_url":"https://alion.io/job/smart-axiata-cybersecurity-operations-engineer.json","meta":{"generated_at":"2026-10-24T03:35:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5635,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49715},"rest":"https://alion.io/mcp/rest/get_company?id=49715"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsmart-axiata-cybersecurity-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsmart-axiata-cybersecurity-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsmart-axiata-cybersecurity-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/smart-axiata-cybersecurity-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsmart-axiata-cybersecurity-operations-engineer"}]}