Cybersecurity Operations Engineer

About Novelus

The Novelus team is composed of innovative professionals committed to accelerating technology deployment. Their greatest asset is their employees, supported through a progressive, dynamic, and empowering workplace culture.

Why Join Novelus

• Work in a friendly and cooperative environment
• Access opportunities for personal and professional advancement
• Engage with cutting-edge technologies and diverse projects

Role Overview

This position involves operating approved security controls, identifying and managing security events, coordinating incident responses, and ensuring compliance with corporate security directives.

Key Responsibilities

• Analyze assigned Endpoint Detection and Response (EDR) and security monitoring alerts, confirm suspicious activities, investigate impacted users or devices, and escalate incidents based on defined severity and response protocols.
• Manage approved endpoint policies and security controls, perform containment actions following delegated authority, and seek approval for any substantial or irreversible changes.
• Collaborate with the infrastructure team to assess perimeter security settings and proposed modifications, identifying vulnerabilities such as improper rules or access exposures and recommending remediation.
• Conduct authorized vulnerability assessments within designated systems and timeframes, validate the findings, prioritize risks based on exposure and business impact, assign responsibility for remediation, and confirm resolution.
• Support privileged-access audits, security baseline verifications, and compliance documentation efforts; maintain an exceptions log and escalate unresolved risks.
• Assist with security gap analyses, risk assessments, control implementations, and update relevant policies within the IT domain.
• Prepare and maintain audit evidence, support internal and external audits, and track corrective measures through resolution.

Qualifications and Skills Required

• 3 to 5 years of experience in security operations with hands-on skills in endpoint security, incident response, vulnerability assessment, and remediation coordination. Experience securing enterprise users, servers, and networks is advantageous.
• Proficiency with deployed EDR, SIEM, and firewall tools, vulnerability analysis, and incident response procedures. Microsoft Security Operations Analyst Associate certification (SC-200) is relevant when Microsoft security solutions are employed.
• Solid understanding of Windows and Linux security fundamentals, incident investigation, vulnerability interpretation, and risk-prioritized remediation.
• Familiarity with ISO/IEC 27001 standards, Information Security Management Systems (ISMS), and Governance, Risk, and Compliance (GRC) frameworks encompassing risk assessment, security control evaluation, compliance audits, policy maintenance, gap analysis, corrective action tracking, and ISO 27001 audit support.
• Capability in technical reporting, evidence management, risk register upkeep, and collaboration across infrastructure, applications, compliance, and audit teams.