Security Engineer

Job Summary

A Security Engineer is responsible for safeguarding an organizations digital assets and networks from cyber threats. They develop security measures, monitor systems for potential vulnerabilities, misconfigurations and respond to security breaches. The engineer will also ensure compliance with security regulations and work closely with other teams to implement secure practices across all levels of the organization.

Responsibilities and Duties

• Monitor, operate and manage the SOC solution/product, logs integrations with various IT assets and resources.
• Analyse internal events and investigations escalated by the managed SOC.
• Perform threat hunting, can effectively leverage data, tools, and intelligence to track down potential intruders and threats.
• Manage incident response in investigating security incidents, documenting findings, and participating in remediation efforts.
• Investigate new softwares and new exes in CrowdStrike sandbox environment, Virus Total and other security tools to provide security clearance before they are installed in organization.
• Implement, test and audit information security controls in various enterprise security products including Firewall, Web Security, EDR, DLP, Identity and Authentication Management (IAM), Privilege Access Management.
• Manage Microsoft Security and Azure/AWS security in coordination IT and Infrastructure team.
• Stay up to date on current and emerging security threats, technology.
• Effectively operate security tools to mitigate threats where possible.
• Perform root cause analysis, design and develop strategies to improve overall security posture of organization.

Knowledge And Skills

• Bachelor's degree in computer science, Information Security, or a related field.
• Minimum 5+ Years of experience in IT and Cyber Security.
• Strong working knowledge with security products like firewalls, web gateway/proxies, antivirus, EDR, DLP, Vuln Scanner and IDP/S products.
• Strong working knowledge with SIEM/SOC products.
• Understands Security Posture management on Cloud Infrastructures on Azure / AWS.
• Understands patch management with the ability to deploy patches in a timely manner whilst understanding business impact.
• Understands vulnerabilities assessments and remediations.
• Good communication skills to effectively convey technical information to non-technical stakeholders.
• Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous.