- Location: Dublin City Centre
- Setup: Hybrid (3 days onsite)
Oliver James’ client is looking to hire an IT Security Operations Engineer to join its internal technology team. This role will support the BAU security function, with responsibility for monitoring alerts, investigating incidents, managing vulnerabilities and helping improve security controls across Microsoft 365, endpoint, cloud and on-premise environments.
Key Responsibilities
- Monitor, triage and investigate security alerts across cloud, Microsoft 365, endpoint and on-premise environments using tools such as SIEM, EDR/XDR and Microsoft Defender.
- Support incident response activity from initial investigation through to containment, remediation, root-cause analysis and follow-up reporting.
- Review vulnerability scan results and security advisories, assess business impact, and coordinate remediation with infrastructure, endpoint and application teams.
- Administer and tune Microsoft security tooling, including Microsoft Defender, Entra ID, Conditional Access, MFA and wider Microsoft 365 security features.
- Work closely with infrastructure, endpoint and service desk teams to improve security posture through hardening, patching and secure configuration changes.
- Assist with security governance, risk and compliance activities, including evidence gathering, audit support and alignment with frameworks such as ISO 27001, GDPR and internal policies.
- Support secure network operations by working with relevant teams on firewall rules, VPN access, web filtering and related network security controls.
- Maintain practical security documentation, including incident response playbooks, operational runbooks and process notes.
Skills & Experience
- Degree in Computer Science, Information Technology, Cybersecurity or a related discipline is desirable; equivalent hands-on experience will also be considered.
- 5+ years’ experience in security operations, security engineering or a similar hands-on cybersecurity role, ideally in a regulated, corporate or professional services environment.
- Strong working knowledge of Microsoft security technologies, including Microsoft Defender, Entra ID, Conditional Access, MFA and Microsoft 365 security administration.
- Hands-on experience with SIEM, EDR/XDR, vulnerability management and cloud security tooling; Azure experience would be highly beneficial.
- Solid understanding of network security fundamentals, including firewalls, VPNs, IDS/IPS, DNS, TCP/IP and secure remote access.
- Experience using PowerShell or another scripting language to automate routine security or infrastructure tasks would be an advantage.
- Relevant certifications such as CompTIA Security+, Microsoft security certifications, CISSP, CISM or CEH would be advantageous but are not essential.
