Security Operation Support Engineer

To support PDAP Security Operations in detecting, investigating, and coordinating the resolution of cybersecurity risks while driving accountability, closure, continuous improvement, and AIOps adoption across the region.

Job Responsibilities

Security Monitoring & Incident Operations Monitor and analyse alerts and cases from SOC, SIEM, EDR, identity-threat detection, endpoint security, IDS/IPS, WAF, email security and other integrated security technologies.

Validate alerts, collect evidence, assess severity and business impact, and coordinate containment, recovery and follow-up with the SOC provider and relevant teams. Support major-incident coordination, including war-room activities, stakeholder updates, investigation records, root-cause analysis and lessons learned.

Accountability, Remediation Tracking & Closure Assign or confirm accountable owners, target dates and escalation paths for actionable incidents, vulnerabilities and security findings.

Track remediation to evidence-based validation and closure; escalate overdue, blocked or high-risk items and maintain a complete audit trail. Confirm residual risk and ensure findings are not closed without sufficient evidence or the appropriate risk decision.

Vulnerability & External Attack Surface Management Coordinate vulnerability notices, assessment findings, penetration-test findings and urgent remediation follow-up across infrastructure, cloud, application and local IT teams.

Support EASM operations, validate external exposures and unregistered assets, engage asset owners and track corrective actions to closure. Produce vulnerability and exposure trends, ageing views, recurring-risk themes and management reporting.

SOC, SIEM/SOAR & AIOps Improvement Work with the SOC provider to improve detection use cases, alert quality, enrichment, correlation, ticket routing and response playbooks. Identify and implement automation opportunities for repetitive triage, evidence collection, notification, assignment, remediation t