Cyber Security Engineer

I am looking to speak with established Cyber Security Engineers specialising in Incident Response to join my clients growing security operations function. This is a key hire and represents a great opportunity for career growth, development and challenge in a Global business. South Dublin with a hybrid 3 days onsite expectation

You will lead the investigation, containment, and resolution of complex, high-impact security incidents, working closely with incident response leadership and cross-functional IT and security teams. Strengthen the organisation’s security posture through proactive threat hunting and detection engineering, using insights from incidents, threat intelligence, and security assessments to continuously improve SOC capabilities.

This is a hands-on technical role requiring strong analytical capability, sound judgement, and a collaborative approach in a global environment. The role includes participation in an on-call rotation and regular on-site presence for onboarding, sensitive activities, and team collaboration.

Responsibilities

• Act as senior escalation point for complex cybersecurity incidents including ransomware, phishing, account compromise, insider threats, data leakage, and third-party incidents
• Lead end-to-end incident investigations across SOC, infrastructure, IT, vulnerability management, threat intelligence, and application security teams
• Collect and analyse data from host, network, identity, cloud, and third-party sources to determine scope, impact, and root cause
• Manage incident lifecycle from detection through containment, eradication, recovery, and post-incident review
• Document incidents clearly and communicate updates and recommendations to technical and non-technical stakeholders
• Improve SOC processes, including MTTR, KPIs, and SLOs
• Support and participate in tabletop exercises and incident response readiness activities
• Maintain and enhance playbooks, procedures, and detection workflows
• Conduct proactive threat hunting to identify vulnerabilities, misconfigurations, and emerging threats
• Research attacker TTPs and IOCs relevant to the organisation and industry
• Develop and refine detection logic, scripts, and queries across SIEM/EDR platforms
• Translate threat intelligence into actionable detections and tune for accuracy and reduced false positives
• Collaborate with Security Engineering to deploy and optimise detection content
• Leverage AI tools and security automation platforms to enhance analysis and detection capabilities

Requirements

• 5–8+ years’ experience in cybersecurity, SOC operations, or incident response
• Proven experience leading or contributing to major security incident investigations
• Strong background in threat hunting and detection engineering
• Hands-on experience with SIEM, EDR, IDS/IPS, and forensic tools
• Experience working in cloud environments (AWS and/or Azure) and identity systems (Active Directory / Azure AD)
• Strong understanding of incident response methodologies and security frameworks
• Relevant certifications such as GCIH, GCFA, CISSP (or equivalent) are desirable

Must be in Ireland, Must Hold Stamp 4, EU of Irish Passport

Email: [email protected] for more detail