The information security team is responsible for protecting IMC’s intellectual property, IT infrastructure and business operations against external and internal threats. We work closely with technology, risk, compliance, internal audit and business leaders to reduce cyber risk to acceptable levels. We are looking for an Information Security Engineer to grow and mature our Security Operations Center function that uses EDR, SIEM, SOAR, CSPM, IAM, firewalls, NIDS/NIPS and various other security controls. We offer an environment that allows you to broaden and deepen your information security knowledge and skills, with access to advanced security technology, frequent training and a culture of knowledge sharing. As you gain experience with our existing SOC technology and processes, you will be given a lot of freedom to further mature the SOC with your own initiatives.

Your Core Responsibilities:

• Analyse security logs, alerts and reported events. Respond to or assist with the remediation of incidents
• Using various threat intelligence sources, hunt for potential compromise across the infrastructure
• Report discovered vulnerabilities to technology owners and suggest remediation steps
• Support and improve technical security controls
• Leverage automation and orchestration solutions to automate repetitive tasks
• Leverage AI-assisted tooling to enhance alert triage, event summarisation, and investigation workflows, with a pragmatic view of its limitations
• Develop reporting for assessing the effectiveness of security controls
• Develop and improve incident response playbooks

 Your Skills and Experience:

• Relevant tertiary and/or security qualifications with previous SOC experience and/or 3+ years of hands-on experience in an enterprise IT environment, managing endpoints and applications on-prem or in the cloud
• Strong analytical and problem-solving skills
• Self-starter and a passion for cybersecurity
• Exposure to security controls like identity and access management, vulnerability management, endpoint detection and response
• Automation using basic coding skills or low code / no code automation tools
• Awareness of AI and machine learning applications in security operations is a plus; any hands-on experience with AI-assisted security tooling or LLM-based workflows is highly regarded.
• Understanding of common attack techniques and frameworks such as MITRE ATT&CK