Agratas – A Tata Enterprise
Cyber security Operation Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Engineer
Role Overview
We are seeking a skilled and proactive Cyber Security Engineer with a proven ability to manage enterprise cybersecurity operations. The ideal candidate will have strong technical expertise across security operations, detection engineering, incident response, and threat hunting, with proven experience working on modern security platforms. This role requires a practitioner who can actively defend enterprise environments and continuously improve security posture.
Key Responsibility Areas
Security Monitoring & Engineering
- Develop and optimise detection use cases aligned with the MITRE ATT&CK framework and emerging threats.
- Tune security controls and automate workflows to reduce false positives and improve detection accuracy.
- Manage and secure Microsoft 365 Security and Microsoft Security platforms.
- Strengthen identity security through attack surface analysis, privilege reviews, and policy optimisation.
- Review security architecture and provide guidance for secure deployment of new applications and technologies.
- Create advanced correlation rules across multiple log sources to detect sophisticated attack patterns and generate high-fidelity alerts.
Incident Response
- Support end-to-end incident response, including triage, investigation, containment, eradication, recovery, and reporting.
- Perform digital forensic investigations across endpoints, servers, cloud environments, and other relevant sources.
- Assist in malware removal, persistence eradication, root cause validation, and secure system recovery.
- Maintain and enhance incident response playbooks to align with current threats and industry best practices.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Threat Hunting
- Conduct structured, unstructured, and intelligence-driven threat hunts across network, endpoint, and cloud environments.
- Analyse security data to identify anomalous behaviour, indicators of compromise (IOCs), and attack patterns.
- Collaborate with security, incident response, and engineering teams to improve detections and strengthen security posture.
- Present findings, recommendations, and remediation strategies to technical and management stakeholders.
- Stay current with emerging threats, attack techniques, and security technologies through continuous learning.
Good to Have
- Knowledge of OT (Operational Technology) security concepts and principles.
- Familiarity with automation and scripting (PowerShell, Python, Bash).
- Experience securing cloud workloads on Azure and AWS.
Required Qualifications
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Relevant experience in cybersecurity operations, monitoring, or security engineering.
- Strong experience with enterprise security solutions across endpoint, network, and cloud environments.
- Proven experience in managing security incidents throughout the full incident response lifecycle.
- Solid understanding of networking fundamentals and security concepts.
- Knowledge of attack techniques, threat detection methodologies, and threat hunting.
- Experience analysing logs, packet captures, endpoint artefacts, and digital evidence.
- Proficiency in Splunk SPL, KQL, SQL, or similar query languages.
Technology Expertise
- Advanced proficiency with EDR, NDR, and SIEM platforms such as Microsoft Defender, CrowdStrike, Splunk, Sentinel, or Elastic.
- Experience with data security technologies, including DLP, IRM, and DSPM solutions.
- Advanced proficiency in configuring and investigating email security platforms.
- Hands-on experience with identity and access management solutions such as Entra ID and Active Directory.
- Strong understanding of authentication and authorisation protocols, including SAML, OAuth 2.0, and OIDC.
- Experience with security automation tools, orchestration platforms, and threat intelligence feeds.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills