Cyber Security Engineer

Realtime Recruitment; Dublin; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Realtime Recruitment is seeking an established Cyber Security Engineer specializing in Incident Response to join a growing security operations function in South Dublin with a hybrid 3 days onsite expectation. You will lead investigations, containment, and resolution of high-impact incidents, collaborating with incident response leadership and cross-functional IT teams.

The role emphasizes threat hunting, detection engineering, and strengthening the SOC posture using threat intelligence and

Qualifications

• 5-8+ years of cybersecurity experience focusing on incident response.
• Proven ability to lead complex security incidents and investigations.
• Strong background in threat hunting and detection engineering.
• Experience with SIEM, EDR, IDS/IPS, and forensic tooling.

Responsibilities

• Act as senior escalation point for complex cybersecurity incidents (ransomware, phishing, account compromise).
• Lead end-to-end incident investigations across SOC, infrastructure, IT, vulnerability management, threat intel, and app security teams.
• Collect and analyse data from host, network, identity, cloud, and third-party sources to determine scope and root cause.
• Manage incident lifecycle from detection through containment, eradication, recovery and post-incident review.
• Document incidents clearly and communicate updates to technical and non-technical stakeholders.
• Improve SOC processes, MTTR, KPIs and SLOs.

Skills

Incident response

Threat hunting

Detection engineering

SIEM

EDR

Cloud security

On-call readiness

Cross-functional

Tools

SIEM

EDR

IDS/IPS

Forensic tools

Job description

I am looking to speak with established Cyber Security Engineers specialising in Incident Response to join my clients growing security operations function. This is a key hire and represents a great opportunity for career growth, development and challenge in a Global business. South Dublin with a hybrid 3 days onsite expectation

You will lead the investigation, containment, and resolution of complex, high-impact security incidents, working closely with incident response leadership and cross-functional IT and security teams. Strengthen the organisation's security posture through proactive threat hunting and detection engineering, using insights from incidents, threat intelligence, and security assessments to continuously improve SOC capabilities.

This is a hands-on technical role requiring strong analytical capability, sound judgement, and a collaborative approach in a global environment. The role includes participation in an on-call rotation and regular on-site presence for onboarding, sensitive activities, and team collaboration.

Responsibilities

• Act as senior escalation point for complex cybersecurity incidents including ransomware, phishing, account compromise, insider threats, data leakage, and third-party incidents
• Lead end-to-end incident investigations across SOC, infrastructure, IT, vulnerability management, threat intelligence, and application security teams
• Collect and analyse data from host, network, identity, cloud, and third-party sources to determine scope, impact, and root cause
• Manage incident lifecycle from detection through containment, eradication, recovery, and post-incident review
• Document incidents clearly and communicate updates and recommendations to technical and non-technical stakeholders
• Improve SOC processes, including MTTR, KPIs, and SLOs
• Support and participate in tabletop exercises and incident response readiness activities
• Maintain and enhance playbooks, procedures, and detection workflows
• Conduct proactive threat hunting to identify vulnerabilities, misconfigurations, and emerging threats
• Research attacker TTPs and IOCs relevant to the organisation and industry
• Develop and refine detection logic, scripts, and queries across SIEM/EDR platforms
• Translate threat intelligence into actionable detections and tune for accuracy and reduced false positives
• Collaborate with Security Engineering to deploy and optimise detection content
• Leverage AI tools and security automation platforms to enhance analysis and detection capabilities

Requirements

• 5-8+ years' experience in cybersecurity, SOC operations, or incident response
• Proven experience leading or contributing to major security incident investigations
• Strong background in threat hunting and detection engineering
• Hands-on experience with SIEM, EDR, IDS/IPS, and forensic tools
• Experience working in cloud environments (AWS and/or Azure) and identity systems (Active Directory / Azure AD)
• Strong understanding of incident response methodologies and security frameworks
• Relevant certifications such as GCIH, GCFA, CISSP (or equivalent) are desirable

Must be in Ireland, Must Hold Stamp 4, EU of Irish Passport