[Hiring] Principal Cyber Security Engineer @TalenCo Recruitment Specialists

Role Description

• AI- and automation-first mindset
• Design, improve, and scale security controls across cloud, endpoint, and identity environments
• Lead complex investigations and drive proactive threat detection
• Mentor junior Engineers, and partner with Technology and Business teams to continuously strengthen the organisation’s security posture

Qualifications

• Deep expertise in AWS security services (CloudTrail, GuardDuty, Config, Security Hub)
• Strong experience with Azure security tooling (Sentinel, Defender, Security Center)
• Advanced knowledge of EDR/XDR platforms and endpoint telemetry
• Hands-on experience with SIEM, SOAR, and log analytics platforms
• Strong understanding of networking, IAM, authentication protocols, and attack vectors
• Python, PowerShell, or Bash for automation and analysis
• Experience applying threat hunting and detection engineering methodologies
• Familiar with AI-driven security tooling and prompt-based analysis

Requirements

• CISSP, CISM, or equivalent senior-level certification
• AWS Security Specialty and / or Azure Security Engineer Associate
• GIAC certifications (GCIH, GCFA, GNFA, GCED)
• CySA+ or advanced SANS training
• Proficient in threat intelligence analysis and application
• Strong understanding of modern attack frameworks and adversary behaviour (MITRE ATT&CK, Cyber Kill Chain)
• Knowledge of compliance frameworks (SOC 2, ISO 27001, NIST)
• Experience in AI platforms and prompts
• Expert-level analytical and problem-solving skills
• Able to work under pressure during major incidents
• Translate complex technical findings into business-relevant insights
• Excellent written and verbal communication skills
• Brief senior stakeholders and executives during incidents
• Strong documentation and reporting capabilities
• Collaborative leadership style with the ability to influence without authority
• Self-driven and accountable, with strong ownership mindset
• Passion for continuous learning and staying ahead of emerging threats
• Comfortable operating in ambiguous, fast-paced environments
• Willingness to support on-call or incident response rotations as required

Benefits

• Lead advanced monitoring and analysis of security events across AWS, Azure, and endpoint platforms
• Design, enhance, and optimise detection logic using CloudTrail, GuardDuty, Security Hub, Azure Sentinel, Defender, and EDR / XDR tools
• Identify security gaps, misconfigurations, and control weaknesses across cloud and SaaS environments
• Develop and maintain automated detection and response workflows using scripting and SOAR principles
• Perform deep analysis of DLP alerts, ensuring protection of sensitive and regulated data
• Lead investigator for high-severity security incidents
• Drive end-to-end incident response activities, including containment, eradication, and recovery
• Advanced host, cloud, and log-based forensic analysis
• Produce executive-level incident reports, root-cause analyses, and post-incident improvement plans
• Support tabletop exercises, incident simulations, and continuous improvement of IR playbooks
• Lead proactive threat hunting activities using behavioural analytics and threat intelligence
• Map detections to MITRE ATT&CK and continuously improve coverage
• Advanced malware analysis and support reverse-engineering efforts
• Translate threat intelligence into actionable detections and preventive controls
• Remain ahead of emerging attack techniques, cloud-native threats, and identity-based attacks
• Monitor and investigate privileged access and identity-based threats
• Lead IAM security reviews and contribute to least-privilege and zero-trust initiatives
• Investigate anomalous authentication behaviour and insider-risk indicators
• Partner with IAM teams to strengthen identity security architecture and controls
• Design and improvement of cloud and enterprise security architectures
• Define security requirements for new platforms, services, and integrations
• Support compliance initiatives aligned to ISO 27001, SOC 2, NIST, PCI DSS and internal risk frameworks
• Mentor junior Engineers and Analysts, provide technical guidance and review
• Influence security strategy through technical insight and data-driven recommendations

Desired Experience & Qualification

• 7 –10+ years of hands-on experience in cybersecurity engineering, SOC, or security operations roles
• Experience leading complex security investigations and incident response
• Strong background in cloud security engineering (AWS and Azure)
• Proven ability to design, tune, and maintain security detections at scale
• Experience mentoring or technically leading other Security Practitioners
• Bachelor’s degree in Cybersecurity / Computer Science / Information Technology / or related field
• Equivalent practical experience will be considered