IT Security Tools Operations Engineer

Responsibilities

IT Security team is responsible for global enterprise IT cyber security, server security, endpoint security, application security construction, and protection. We work to improve overall IT security capabilities and security posture by providing security processes, security assessments, security operations, and security vulnerability management services. The team also supports IT teams and business departments across the organization in meeting their security requirements.

Responsibilities
- Security Tools Administration: Manage the day-to-day operations, configuration, and administration of enterprise IT security tools (including firewalls, IDS/IPS, EDR, SWG, VPN, DLP, Mail Gateways, and other security-related technologies).
- Performance & Health Monitoring: Proactively monitor the performance, health, and availability of security infrastructure; identify, troubleshoot, and resolve technical issues or anomalies to ensure continuous functionality.
- Lifecycle & Patch Management: Perform regular maintenance activities, including updates, patches, upgrades, and configuration fine-tuning to ensure systems remain secure and up to date.
- Policy & Rule Optimization: Collaborate with IT and cross-functional security teams to define, implement, and optimize security tool configurations, policies, and rules to align with organizational security requirements and industry best practices.
- Compliance & Auditing: Conduct routine audits and compliance assessments of security tools to verify alignment with regulatory standards and internal security policies.
- Evaluation & Deployment: Participate in the evaluation, proof-of-concept (PoC) testing, selection, and implementation of new security tools and technologies to continuously enhance the overall security posture.
- Incident Response & Log Analysis: Review security logs and reports to identify patterns or anomalies that may indicate potential security breaches; respond to and resolve security incidents in a timely manner.
- Documentation & SOPs: Assist in developing and maintaining comprehensive security documentation, including standard operating procedures (SOPs), user guides, and knowledge base articles to facilitate effective tool utilization and support.
- Training & Support: Provide technical support and training to end-users and other IT teams on the proper usage and maintenance of security tools.
- Cross-Functional Collaboration: Partner with vendors, internal stakeholders, and cross-functional teams to ensure security policies and procedures are followed and technical issues are resolved efficiently.
- Operational Flexibility: Support operational needs, which may require flexible working hours, shift schedules, or weekend/holiday coverage, while maintaining a standard 5-day in-office work week.

Qualifications

Minimum Qualification(s):
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related technical field.
- 4+ years of professional experience in a cyber security role, with a strong focus on IT security operations, administration, and maintenance of security tools.
- Deep understanding of network and system security concepts across Windows and Linux environments, as well as application security.
- Hands-on experience with security technologies and tools, including SIEM, IDS/IPS, EDR, VPN, SWG, CASB, firewalls, and vulnerability scanners.
- Excellent analytical and troubleshooting skills, with a proven ability to independently diagnose and resolve complex technical issues related to security tools.
- Strong interpersonal and communication skills, with the ability to collaborate effectively with cross-functional teams, internal stakeholders, and external vendors.

Preferred Qualification(s):
- Relevant professional certifications (e.g., CISSP, CISA, CISM, or equivalent) are highly preferred.
- Programming/scripting ability (e.g., Python, Bash) and penetration testing experience.