I’m looking for a Cyber Security Platform Engineer to join my client’s growing team in Dublin. You’ll be responsible for enhancing the effectiveness, governance, and operational performance of cybersecurity controls and technologies across the airline environment. This role focuses on ensuring security tools are optimally configured, continuously improved, and aligned with evolving threats and business requirements.
Reporting to the Senior Manager of Cyber Defence, the Cyber Operations Engineer will work closely with Security Operations, Cyber Engineering & Architecture, Infrastructure, Cloud, and Technology teams to strengthen preventative and detective security capabilities. The role serves as a key link between cyber defence operations, security engineering, and technology teams, translating threat intelligence, incident findings, and emerging attack techniques into measurable security improvements.
Key Success Measures
Within the first 6–12 months, the successful candidate will:
- Establish a baseline for security tooling performance, control coverage, and effectiveness.
- Identify and implement opportunities to automate configuration management and cyber control changes.
- Improve the effectiveness of preventative and detective security controls.
- Reduce operational overhead associated with incident response and remediation activities.
- Enhance governance, documentation, and standardisation across cybersecurity platforms.
Key Responsibilities
Security Tooling & Control Management
- Manage, maintain, and continuously improve enterprise cybersecurity technologies and security controls across:
- Email security
- Endpoint security (EDR/MDR, device hardening)
- Identity and access security
- Data protection and information security controls
- Cloud security platforms and native cloud security services
- Network and application security technologies
- Ensure security tools remain optimally configured, aligned with security standards, and capable of addressing emerging threats.
Continuous Improvement & Security Enhancement
- Collaborate with Threat Intelligence, Threat Hunting, Vulnerability Management, and Cyber Engineering teams to:
- Identify security control gaps, weaknesses, and opportunities for improvement.
- Develop and implement enhancements to security configurations, policies, and controls.
- Translate lessons learned from incidents into preventative and detective security improvements.
- Strengthen resilience against current and emerging attack techniques.
Security Operations Partnership
- Work closely with the Security Operations Centre (SOC) to:
- Improve detection coverage and effectiveness.
- Enhance alert quality and reduce false positives.
- Improve visibility across critical systems and environments.
- Ensure controls remain aligned with real-world adversary tactics, techniques, and procedures (TTPs).
Governance & Standards
- Support the governance and oversight of cybersecurity platforms by:
- Ensuring configurations align with approved security policies and standards.
- Maintaining documentation, configuration baselines, and operational procedures.
- Contributing to security standards, hardening guides, and operational runbooks.
- Supporting audit and compliance activities through evidence gathering and control validation.
Engineering & Technology Collaboration
- Provide operational insights into security tooling effectiveness, platform performance, and control design decisions.
- Support the deployment and operational transition of new cybersecurity technologies.
- Work with internal technology teams and third-party providers to ensure effective support and operational management of security services.
Skills, Knowledge & Experience
Essential
- Minimum 4 years of hands-on experience in cybersecurity, security engineering, security operations, infrastructure engineering, or cloud engineering.
- Demonstrable experience implementing, configuring, and optimising enterprise-scale security technologies and controls.
- Strong understanding of modern cybersecurity principles and how security controls operate in complex enterprise environments.
- Experience working closely with Security Operations Centres (SOC) and technology operations teams.
- Practical experience with security platforms such as:
- CrowdStrike
- Microsoft Purview
- Palo Alto Networks
- Microsoft Security technologies
- Experience managing security configurations, change control processes, and operational governance activities.
- Strong analytical and problem-solving skills with a continuous improvement mindset.
- Professional cybersecurity certifications such as:
- CISSP
- GCIH
- Security+
- Cloud Security certifications
- Or equivalent industry-recognised qualifications
Desirable
- Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies.
- Knowledge of the MITRE ATT&CK framework and adversary emulation techniques.
- Experience operating within cloud-first or hybrid enterprise environments.
- Experience managing or working with outsourced security service providers.
- Familiarity with security automation and orchestration technologies.
Personal Attributes
- Collaborative and relationship-focused approach.
- Strong communication and stakeholder management skills.
- Ability to balance operational priorities with strategic improvement initiatives.
- Self-motivated, proactive, and comfortable working in a fast-paced environment.
- Passionate about continuous learning and staying current with the evolving threat landscape.
Salary dependent on candidate experience. Benefits: Annual Bonus Scheme. Contributory Pension. Private Medical Insurance. Life Assurance & Long-Term Disability. Employee Assistance Programme. 22 days annual leave + 10 public holidays. Relocation package. Continuous Learning & Development. Access to extensive training & certification resources. Lunch & Learn sessions. Additional perks including company discounts, on-site parking, and bike-to-work scheme
Based in Swords, Dublin. Hybrid. Candidates must be eligible to work in Ireland/EU.
For more information, please contact David Coyle at 01 635 1748 or email [email protected]