Security Engineer

Responsibilities:

Technical Support and Incident Resolution:

• Provide second-level technical support for enterprise security solutions and customer environments.
• Investigate, troubleshoot, and resolve complex security incidents and technical issues escalated from first-level support.
• Perform system diagnostics, security log analysis, network traffic analysis, and root-cause analysis.
• Resolve technical issues within agreed Service Level Agreements (SLAs) and escalate unresolved cases appropriately.
• Provide technical guidance and support to first-level engineers.

Security Solution Administration:

• Install, configure, upgrade, and maintain enterprise cybersecurity platforms.
• Conduct routine system health checks and preventive maintenance
• Monitor security platform availability, performance, capacity, and operational health.
• Validate security policies, rules, integrations, and system configurations.
• Support backup, restoration, disaster recovery, and high-availability activities where required.

Deployment and Project Support:

• Support the implementation, deployment, and integration of enterprise security solutions.
• Participate in Proof of Concept (PoC) and Proof of Value (PoV) activities,solution testing, and customer demonstrations.
• Assist with acceptance testing, post-deployment validation, system upgrades,and platform optimisation.
• Collaborate with project teams and solution architects to ensure successful implementation of security technologies.

OEM and Vendor Management:

• Engage Original Equipment Manufacturers (OEMs) and vendor technical support teams to resolve complex product-related issues.
• Provide diagnostic logs, configuration details, and relevant troubleshooting evidence during escalations.
• Track escalated cases through to resolution and implement approved fixes or workarounds.
• Document vendor recommendations and ensure timely resolution of technical issues in line with agreed SLAs.

Documentation and Reporting:

• Maintain accurate technical documentation, troubleshooting guides, runbooks,and knowledge-base articles.
• Prepare incident reports, root-cause analysis reports, and technical service updates.
• Maintain records of incidents, system changes, configurations, and maintenance activities.
• Contribute to knowledge sharing and continuous improvement within the Enterprise Security team.

Customer Engagement and Service Delivery:

• Provide clear and timely technical updates to customers regarding reported issues and their resolution.
• Participate in customer meetings, technical workshops, service reviews, and knowledge-transfer sessions.
• Ensure customer issues are handled professionally and resolved within agreed timelines.
• Collaborate with L1 engineers, L3 engineers, solution architects, project teams, and service delivery teams to maintain effective service delivery.

Security Monitoring and Platform Maintenance:

• Monitor the performance and effectiveness of deployed security solutions.
• Support security technologies, including SIEM, EDR/XDR, DLP, IAM/PAM, WAF,DAM, NDR, and vulnerability management solutions.
• Identify system faults, configuration issues, and performance gaps that may affect security operations.
• Participate in planned maintenance, after-hours support, and on-call activities when required.

Requirements:

• HND in Computer Science, Information Technology,
• Cybersecurity, Computer Engineering, or a related discipline.
• 3–5 years of relevant experience in cybersecurity engineering, security operations, or enterprise security technical support.
• Demonstrable experience supporting and troubleshooting enterprise security solutions.
• Good understanding of TCP/IP, DNS, routing, switching, VPNs, firewalls, and network traffic analysis.
• Working knowledge of Windows and Linux operating systems.
• Experience analysing security logs, investigating incidents, and resolving technical issues.
• Strong analytical, troubleshooting, communication, and customer service skills.
• Ability to work independently, manage competing priorities, and collaborate effectively within a technical team.

Preferred Technical Skills:

Experience with one or more of the following will be an advantage:

• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR/XDR)
• Data Loss Prevention (DLP)
• Identity and Access Management (IAM) / Privileged Access Management (PAM)
• Web Application Firewall (WAF) and Database Activity Monitoring (DAM)
• Network Detection and Response (NDR)
• Vulnerability and cloud security management
• Security orchestration and automation

Preferred Certifications:

Relevant certifications will be an added advantage, including:

• CompTIA Security+ or CySA+
• Certified SOC Analyst (CSA) or Certified Ethical Hacker (CEH)
• Microsoft Security certifications
• Fortinet NSE/FCP Security certifications
• Palo Alto Networks certifications
• Cisco CyberOps Associate
• Vendor-specific certifications in enterprise security technologies