Cyber Operations Engineer

DAA plc; Dublin; On-site; EUR 80,000 - 120,000; Full time

Job summary

DAA plc seeks an experienced cybersecurity professional to lead vulnerability management and cloud security across its infrastructure and digital environments.

The role includes coordinating remediation activities, supporting SOC operations and incident response, and driving governance and metrics for security programs, including emerging AI-related cybersecurity initiatives.

Qualifications

• At least 5 years in IT or Cyber Security.
• Experience in Vulnerability Management, Cloud Security, SOC or related.
• Experience with governance, audit or compliance initiatives.
• Strong communication and stakeholder engagement.

Responsibilities

• Champion vulnerability management and cloud security across daa.
• Monitor and prioritise vulnerabilities across daa infrastructure, cloud platforms, applications and OT.
• Communicate remediation priorities to stakeholders and coordinate remediation activities.
• Manage the outsourced vulnerability management service provider.
• Develop vulnerability management standards, metrics and dashboards.
• Monitor emerging vulnerabilities, zero-day threats and threat intel for daa.
• Support security reviews, projects and continuous improvement across new technologies.
• Support Security Operations Centre activities including monitoring and incident response.
• Support AI, automation and emerging technologies to manage cyber security risks.

Skills

Vulnerability management

Cloud security

SOC operations

Incident response

Threat intelligence

Security governance

Risk management

Vendor management

AI security

Communication skills

Education

Bachelor's degree

Master's degree

Cyber security degree

Tools

SIEM

EDR/XDR

Threat intel tools

Job description

The role also supports cyber security projects, security reviews, SOC activities, incident response and the secure adoption of emerging technologies including Artificial Intelligence.

Responsibilities

• Act as a champion for vulnerability management, cloud security and cyber security best practices across daa, helping to improve security awareness and reduce organisational risk.
• Monitor, assess and prioritise vulnerabilities across daa infrastructure, cloud platforms, applications and Operational Technology environments, ensuring risks are understood and addressed in line with business priorities.
• Communicate remediation priorities to technical and business stakeholders and coordinate remediation activities with IT owners, service providers and vendors to reduce cyber risk.
• Manage the outsourced vulnerability management service provider, ensuring effective delivery of agreed services, governance, reporting, continuous improvement and adherence to daa security standards and processes.
• Develop and maintain vulnerability management standards, procedures, metrics, dashboards and governance processes to support operational and management decision making.
• Monitor emerging vulnerabilities, zero-day threats, threat intelligence and attack techniques, assessing relevance to daa and supporting appropriate response and mitigation activity.
• Support the delivery of cyber security reviews, assessments, projects, strategic initiatives and continuous improvement activities across new and existing technologies.
• Support Security Operations Centre activities including cyber security monitoring, investigations, incident response, cyber exercises, tabletop simulations and lessons learned reviews.
• Support initiatives relating to Artificial Intelligence, automation and emerging technologies, helping ensure associated cyber security risks are appropriately managed.

Note: The successful candidate may be required to participate in an on-call rota to support cyber operations and incident response activities outside normal business hours. This may include supporting the investigation, management and recovery of cyber security incidents, major service-impacting security events and other urgent cyber response activities.

Qualifications

Experience

At least 5 years’ experience in IT and/or Cyber Security, including strong experience in Vulnerability Management, Cyber Security Engineering, Security Operations, Cloud Security or a related discipline. Experience working in complex operational environments supporting critical infrastructure, internal stakeholders, technology vendors, managed service providers and outsourced security service providers is required. Experience supporting governance, audit, compliance or cyber security improvement initiatives is also desirable.

Skills

Suitable candidates should have experience of vulnerability management processes, technologies and remediation practices; cloud security principles, governance and cloud vulnerability management; OT or industrial control system security concepts; cyber security technologies including incident response, threat assessment, malware analysis and investigation of Indicators of Compromise; SOC, SIEM, EDR/XDR and threat intelligence technologies; security frameworks including ISO27001, NIST Cyber Security Framework, MITRE ATT&CK and Cyber Essentials; risk management, remediation planning, reporting, metrics, stakeholder communication, project delivery, vendor management, Artificial Intelligence security considerations and emerging cyber threat trends. Strong communication and presentation skills are required, with the ability to engage both technical and non-technical audiences.

Education & Qualifications

Suitable candidates should have an Honours Bachelor’s Degree and/or Master’s Degree, or equivalent, in Cyber Security, Information Technology, Computer Science, Engineering or a related discipline.

Mandatory Practicing/Training/Compliance Certification

Relevant cyber security certifications such as CISSP, CISM, CySA+, Microsoft security certifications, cloud security certifications, vulnerability management certifications or incident response certifications are desirable.

Professional Memberships

Professional membership of a recognised cyber security, information security, technology or risk management body is desirable but not mandatory.

Job Info

• Job Identification 20241075
• Job Category Digital and Technology | IT Security