SECURITY ENGINEER

The Security Engineer is responsible for designing, implementing, and maintaining the security infrastructure of the organization. This role ensures that systems, networks, and applications are protected against current and emerging cyber threats. The ideal candidate will have hands-on experience in network security, vulnerability management, incident response, and security automation.

Key Responsibilities:

• Design, implement, and manage security tools such as firewalls, IDS/IPS, SIEM, and endpoint security.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and mitigate risks.
• Monitor security alerts and logs; analyze and respond to potential threats or incidents.
• Develop and enforce security policies, standards, and best practices.
• Implement and manage identity and access management (IAM) solutions.
• Collaborate with DevOps and software engineering teams to embed security in the SDLC (DevSecOps).
• Conduct security awareness training for employees and IT teams.
• Maintain up-to-date knowledge of cybersecurity trends, attack vectors, and defense strategies.
• Support compliance efforts (ISO 27001, SOC 2, GDPR, HIPAA, etc.).
• Assist in incident response, forensic investigations, and root cause analysis.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 2–5 years of experience in information security, network security, or system administration.
• Strong knowledge of firewalls, VPNs, IDS/IPS, and endpoint security solutions.
• Experience with SIEM tools (e.g., Splunk, QRadar, Sentinel).
• Familiarity with cloud security (AWS, Azure, or GCP).
• Understanding of common attack techniques, malware, and mitigation strategies.
• Knowledge of compliance frameworks and risk management practices.
• Excellent problem-solving and communication skills.

Preferred Qualifications:

• Certifications such as CEH, CISSP, CompTIA Security+, OSCP, or CISM.
• Experience with scripting or automation (Python, Bash, PowerShell).
• Familiarity with container security (Docker, Kubernetes).
• Experience in incident response or threat intelligence.