Key Responsibilities:
Security Operations
Coordinate and oversee the day-to-day operational delivery of the Cybersecurity Operations function, ensuring operational priorities are effectively managed and delivered.
Act as the primary operational escalation point for complex cybersecurity incidents, security alerts and technical issues requiring advanced investigation or engineering expertise.
Lead the investigation, containment, eradication and recovery of complex cybersecurity incidents, providing technical guidance and support to Cybersecurity Analysts throughout the incident lifecycle.
Review and validate analyst investigations, incident records, root cause analysis and remediation activities, ensuring operational quality, consistency and adherence to established procedures.
Coordinate major cybersecurity incidents with CIÉ Group IT, managed security service providers, third-party suppliers, business stakeholders and external partners where required.
Conduct proactive threat hunting activities, identify emerging attack techniques and continually improve monitoring, detection and response capabilities.
Develop, implement and maintain security monitoring use cases, detection logic, alert tuning and automation to improve operational effectiveness.
Monitor the operational health and effectiveness of enterprise cybersecurity platforms, ensuring monitoring, alerting and integrations remain effective.
Coordinate operational workload across the Cybersecurity Operations team, ensuring activities are prioritised, assigned and delivered in line with business priorities and agreed service levels.
Review operational performance, identify opportunities for improvement and implement enhancements to strengthen the Cybersecurity Operations function.
Vulnerability Management & Penetration Testing
Manage the organisation's vulnerability management programme, ensuring vulnerabilities are identified, risk assessed, prioritised and remediated within agreed service levels.
Coordinate internal and third-party penetration testing engagements, including planning, scope definition, scheduling, stakeholder engagement, remediation planning and reporting.
Review technical findings, validate remediation activities and work closely with ICT teams and suppliers to ensure effective and sustainable remediation.
Monitor remediation progress, challenge delays where appropriate and escalate significant risks to the Cybersecurity Operations Manager.
Produce vulnerability management dashboards, KPIs, trend analysis and executive reporting.
Identify recurring technical weaknesses and implement long-term improvements to reduce organisational cyber risk.
Maintain oversight of vulnerability and penetration testing SLAs and drive remediation activities to successful completion.
Data Security
Coordinate the administration, optimisation and continual improvement of Microsoft Purview and other enterprise data security platforms.
Support the implementation and maintenance of Data Loss Prevention (DLP), Information Protection, Sensitivity Labels and data classification controls.
Coordinate investigations into data security incidents and policy violations, working with ICT teams and business stakeholders to implement corrective actions.
Support the development and maintenance of data security standards, procedures and operational guidance.
Provide technical expertise to support audit, compliance and regulatory activities relating to enterprise data security controls.
Security Technologies & Governance
Lead the implementation, configuration, administration and continual improvement of enterprise cybersecurity technologies across endpoint, cloud, identity, network, email and data security domains.
Ensure enterprise cybersecurity technologies remain secure, resilient, appropriately configured and aligned with organisational standards and industry best practice.
Deliver technical activities relating to Microsoft Entra ID, Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), Privileged Access Management (PAM) and Zero Trust security controls.
Develop and enhance security monitoring content, engineering standards, automation and operational processes to improve efficiency and threat detection capability.
Develop and maintain secure configuration baselines, cybersecurity standards, operational procedures, technical documentation and incident response playbooks.
Evaluate emerging cybersecurity technologies, threats and industry developments, recommending technical improvements to strengthen the organisation's cybersecurity capability.
Support internal and external audits, regulatory reviews and compliance activities relating to ISO/IEC 27001, NIS2 and other applicable frameworks.
Projects & Collaboration
Lead cybersecurity engineering workstreams across infrastructure, cloud, application and business projects, ensuring cybersecurity requirements are embedded throughout the project lifecycle.
Provide cybersecurity design assurance and technical guidance for new technologies, infrastructure changes and solution implementations.
Coordinate technical implementation activities with ICT teams, managed security service providers and third-party suppliers.
Represent Cybersecurity Operations at technical workshops, project meetings and Change Advisory Board (CAB) meetings where required.
Support the operational acceptance and transition of new technologies into the Cybersecurity Operations function.
Mentor, coach and support Cybersecurity Analysts, providing technical guidance, quality assurance and ongoing professional development.
Support the Cybersecurity Operations Manager in coordinating day-to-day operational activities, prioritising workload and ensuring continuity of Cybersecurity Operations during periods of increased operational demand.
Build strong working relationships with CIÉ Group IT, business units, suppliers and managed security service providers to promote effective collaboration and continual service improvement.
Produce technical reports, dashboards, KPIs and operational management information to support governance and decision-making.
Identify opportunities to improve Cybersecurity Operations processes, automation, tooling and service delivery, driving continual improvement across the function.
Undertake any other duties appropriate to the role as reasonably required by the Cybersecurity Operations Manager.
Essential Criteria
Level 8 qualification (or higher) in Cybersecurity, Computer Science, Information Technology or a related discipline, or equivalent industry experience.
Minimum 3 years’ experience in Cybersecurity Engineering, Security Operations, Infrastructure Security or a related technical discipline within a complex enterprise environment.
CISSP certification is essential.
Demonstrable experience administering, engineering and supporting enterprise cybersecurity technologies including SIEM, EDR, vulnerability management, identity security, email security and data security platforms.
Strong technical knowledge of Microsoft 365, Microsoft Entra ID, Microsoft Azure, Microsoft Defender XDR and Microsoft security technologies.
Strong understanding of enterprise networking, Active Directory, Identity & Access Management (IAM), Privileged Access Management (PAM) and Zero Trust architecture.
Demonstrable experience leading vulnerability management and penetration testing programmes from planning through remediation.
Experience delivering enterprise cybersecurity projects from design through implementation and operational handover.
Experience coordinating day-to-day Cybersecurity Operations activities and managing multiple operational priorities.
Experience mentoring, coaching and developing Cybersecurity Analysts or junior technical staff.
Experience working closely with ICT teams, managed security service providers, third-party suppliers and business stakeholders.
Experience developing cybersecurity standards, technical procedures, operational playbooks and engineering documentation.
Strong understanding of ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK and NIS2.
Excellent analytical, troubleshooting, problem-solving and communication skills.
Desirable
Professional certifications such as CISM, CCSP, SC-200, AZ-500, CySA+, PenTest+ or equivalent.
Experience administering Microsoft Defender XDR, Microsoft Sentinel, Qualys, Microsoft Purview, IBM QRadar or equivalent enterprise cybersecurity platforms.
Experience implementing Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management and Data Lifecycle Management capabilities.
Experience designing and implementing enterprise security architectures and technical security controls.
Experience leading technical investigations following significant cybersecurity incidents.
Experience with PowerShell, Kusto Query Language (KQL), Python or other scripting languages to support automation and operational efficiency.
Experience working within Critical National Infrastructure (CNI), transport or other highly regulated environments.
Knowledge of Operational Technology (OT) security principles, industrial control systems and the Purdue Enterprise Reference Architecture.
Experience supporting procurement activities, product evaluations and proof-of-concept implementations for enterprise cybersecurity technologies.
If any applicants have special requirements, please advise Shared Services when forwarding your application.
At Iarnród Éireann Irish Rail we are committed to embedding diversity and inclusion in all that we do. This starts with how we recruit people. It is important to us that all individuals feel welcome to join our organisation and we take great care to ensure an even playing field for all.
We will strive to provide reasonable accommodation to all candidates where required and requested.
We are an equal opportunities employer and do not discriminate against any employee or applicant for employment because of race, ethnicity, sex, age, religion, sexual orientation, gender identity and/or expression or disability.
At Iarnród Éireann, our recruitment team is at the forefront of building the future of Ireland's railway network. We are the national railway company, committed to connecting people, places, and opportunities across the country through safe, efficient, and sustainable rail services.
Our dedicated recruitment professionals play a pivotal role in sourcing, identifying, and nurturing talent that powers our railway network's growth and success. We are passionate about matching exceptional candidates with rewarding career opportunities within our organization.
At Iarnród Éireann, we adhere to the highest standards of safety, innovation, and customer service. We understand that our people are the driving force behind our achievements, and we take pride in offering a supportive, inclusive, and rewarding workplace.
Join us on our mission to shape the future of transportation in Ireland. As a member of our recruitment team, you will help create a greener, smarter, and more interconnected Ireland. Your work will contribute to a sustainable and prosperous future for our nation.
Discover the exciting opportunities at Iarnród Éireann and be part of a company that values your skills, aspirations, and commitment to excellence. Together, we're moving Ireland forward, one railway journey at a time.
At Iarnród Éireann, we're Ireland's national railway company, connecting people and places with safe, efficient, and environmentally-friendly rail services. We're at the heart of the nation's transportation network, committed to delivering high-quality journeys that keep Ireland moving.
Our team of dedicated professionals works tirelessly to ensure our railway services are reliable, accessible, and sustainable. With a history dating back to 1987, Iarnród Éireann plays a vital role in connecting communities and facilitating economic growth across the country.
Join us, and you'll be a part of a company that values safety, innovation, and customer service. Whether you're in engineering, operations, customer service, or administration, you'll contribute to our mission of providing a greener, smarter, and more interconnected future for Ireland.
If you're looking for a career that combines a sense of purpose with opportunities for growth and development, Iarnród Éireann is the place for you. Come on board and help us shape the future of transportation in Ireland.
