Cybersecurity Engineer - Contract

Our client (from Government Sector) is seeking a Cybersecurity Engineer to support the day-to-day operations and maintenance of the organization's cybersecurity infrastructure and security services.

The role focuses on firewall and WAF administration, SIEM operations, vulnerability management, and security monitoring.

The successful candidate will maintain security platforms, monitor the health of security controls, coordinate remediation with stakeholders, and prepare operational reports and dashboards.

They will also assist in troubleshooting firewall, WAF, and network security issues as needed.

Key Responsibilities

1. Administer, maintain, and support on-premises firewalls, cloud-based network security controls, and related security infrastructure, including policy implementation, rule reviews, software upgrades, patching, and lifecycle management.

2. Perform health monitoring, preventive maintenance, and operational support for firewall platforms to ensure optimal performance, availability, and security.

3. Execute firewall policy changes, troubleshoot firewall-related issues, and resolve network connectivity issues arising from security configurations and policies.

4. Configure, administer, and maintain Web Application Firewall (WAF) platforms, including policy deployment, rule management, policy tuning, signature updates, virtual patching, false-positive reviews, and ongoing operational support.

5. Monitor and analyse firewall, WAF, and security monitoring logs to identify operational issues, suspicious activities, and potential security concerns, escalating issues where necessary.

6. Monitor SIEM agent health across servers, coordinate with stakeholders to resolve issues, onboard new systems, and perform completeness checks to validate log coverage.

7. Support SIEM operations, including log onboarding, data source integration, log coverage validation, alert monitoring, dashboard maintenance, and operational support.

8. Develop and maintain security dashboards, reports, and operational metrics using SIEM and security management tools to support operational monitoring and management reporting.

9. Monitor and track security alerts generated from security platforms and coordinate with relevant stakeholders to ensure timely investigation and remediation.

10. Manage the end-to-end Vulnerability Management lifecycle, including vulnerability assessments, remediation tracking, consolidation of remediation status, stakeholder follow-up, and preparation of management reports.

11. Review vulnerability assessment findings affecting infrastructure and web applications and collaborate with stakeholders to implement remediation measures or compensating controls through firewall and WAF technologies where appropriate.

12. Assist in periodic reviews of firewall and WAF policies, configurations, logs, and rule bases, and prepare operational reports and recommendations for stakeholders.

13. Provide troubleshooting and operational support to resolve issues relating to firewall policies, WAF configurations, network security controls, and security monitoring platforms.

14. Create and maintain technical documentation, including network diagrams, security configurations, operational procedures, system inventories, and support documentation.

15. Work closely with infrastructure, application, and project teams to implement and maintain cybersecurity controls and operational requirements.

16. Support daily security operations activities, including security monitoring, alert tracking, vulnerability management follow-up, and operational coordination with stakeholders.

Requirements

Qualifications

• Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.

Experience

• Minimum 2 to 5 years of experience in cybersecurity operations, network security administration, or security engineering.

• Experience with Palo Alto Networks firewall administration (e.g. PCNSA) and Splunk certifications will be preferred.

• Experience administering or supporting Web Application Firewall (WAF) technologies.

• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, or equivalent log management and monitoring solutions.

• Experience in vulnerability management, including vulnerability assessments, remediation tracking, and reporting, will be an added advantage.

Technical Skills

• Good understanding of network security concepts, including TCP/IP, routing, switching, NAT, DNS, VPN, ARP, and network segmentation.

• Familiarity with network troubleshooting and packet analysis tools such as Wireshark and tcpdump.

• Ability to analyse firewall, WAF, and SIEM logs for troubleshooting and operational investigations.

• Understanding of web application security concepts and common web application threats.

• Familiarity with security technologies such as firewalls, IPS, WAF, web proxies, SIEM platforms, and cloud security controls.

• Familiarity with cloud security concepts and cloud-native network security controls will be advantageous.

Preferred Certifications

• Relevant certifications in Palo Alto Networks, Splunk, or Microsoft Sentinel will be advantageous.

• CompTIA Security+.

• ISC2 CC, SSCP, CISSP, or equivalent cybersecurity certifications.

Skills

Information Security, Preventive Maintenance, implementing monitoring tools, Web Application Firewall, High Availability, Information Technology, Computer Science, Stakeholder Engagement, Reviewing, Software Upgrades, Network Troubleshooting, Operational Support, Cybersecurity, Reports, Platforms, Security Monitoring