Job Title: Cyber Security Engineer – L2

Overall Experience: 12 to 15 Years

Relevant Experience (Cyber Security Domain): Minimum 5 Years

Salary Budget : 20 K AED

Role Objective -

The Cyber Security L2 Engineer will be responsible for the day-to-day operations, administration, and maintenance of enterprise security infrastructure.

The role requires strong hands-on expertise in Imperva Database Activity Monitoring (DAM) and Cisco Email & Web Security (ESA / WSA), along with good operational experience in managing and fine-tuning multiple security technologies. The engineer will also collaborate closely with cross-functional teams.

Must-Have Skills

Imperva DAM: Administration, policy tuning, agent health checks, reporting, and SIEM integration.
Cisco WSA / ESA: Policy management, content filtering, anti-spam configuration, SSL decryption, and quarantine management.
Incident Response & Investigation: L2-level triage, log analysis, and root cause identification.
Policy Administration & Security Control Implementation.
Patch, Upgrade, and Version Management.
Operational Reporting & Documentation.
Awareness of Security Frameworks (ISO 27001, NIST, Zero Trust, etc.).
Technical Environment Familiarity: Windows, Linux, VMware, SIEM, Network Security, Firewall, and Routing fundamentals.

Must-Have Certifications

CISSP
Imperva DAM or Database Security Certification (e.g., Imperva Certified Implementation Specialist – CIS-DAM).
Cisco Certified – CCNP Security (WSA/ESA related).

Key Responsibilities -

Operational & Technical

Manage and operate Imperva DAM and Cisco ESA / WSA platforms.
Perform incident response and investigation, analyze alerts, and coordinate remediation with relevant teams.
Conduct policy administration and fine-tuning to enhance detection accuracy and reduce false positives.
Support the implementation and configuration of security controls across domains.
Perform system health checks for all managed security tools, ensuring continuous availability and performance.
Manage patching, version upgrades, and platform migrations in collaboration with OEM and infrastructure teams.
Maintain documentation and operational reports, including incident logs, RCA reports, and audit evidence.
Collaborate with SOC, Network, and Infrastructure teams for incident correlation and service restoration.
Ensure adherence to established security frameworks, governance models, and ITIL-based change management policies.

Governance & Compliance

Maintain compliance with defined security baselines, standards, and procedures.
Contribute to vulnerability and risk assessments by providing insights from DAM and ESA/WSA findings.
Participate in internal and external security audits, ensuring readiness, documentation, and corrective action tracking.

Good-to-Have Skills

Experience with Forcepoint DLP, CyberArk PAM, or Trend Micro Apex One / Deep Security.
Basic familiarity with OPSWAT MetaDefender, Tenable.io, or F5 ASM/WAF.

Good-to-Have Certifications

CompTIA Security+, or CySA+.
Cisco Security certifications (e.g., CCIE Security).
ISO 27001: Lead Implementer / Lead Auditor.

Key Attributes

Strong analytical, troubleshooting, and communication skills.
Ability to work independently and collaboratively under pressure.
Process-driven mindset focused on continuous improvement and automation.
Documentation-oriented approach aligned with ITIL and audit requirements.

Anix Global

New Jobs

Cyber Security Engineer – L2