CQ10048 - Security Engineer

Position Overview:

The Security Engineer is responsible for configuring, managing, and maintaining the organizations security systems, including firewalls, antivirus solutions, data loss prevention (DLP) systems, and email gateways. This role ensures the security and integrity of the IT infrastructure and sensitive data while proactively defending against cyber threats.

Key Responsibilities:

Firewall Security:

• Configure, monitor, and maintain firewalls to protect internal networks.
• Perform updates, patches, and performance tuning.
• Develop and implement firewall rules to control access and prevent unauthorized activities.
• Analyze and respond to security incidents and alerts.
• Conduct periodic firewall configuration reviews for compliance.
• Maintain documentation for rules, changes, and configurations.

Antivirus Management:

• Administer and manage antivirus systems to ensure endpoint protection.
• Monitor antivirus dashboards for threats and take remediation actions.
• Perform software updates and upgrades.
• Create policies for real-time scanning, quarantining, and incident response.
• Generate reports on antivirus performance and threat detections.

Data Loss Prevention (DLP):

• Configure and manage DLP tools to monitor and prevent unauthorized data transfers.
• Develop and enforce data protection policies.
• Monitor alerts and respond to potential data leakage incidents.
• Conduct root cause analysis of breaches.
• Educate employees on data security practices.

Email Gateway Security:

• Manage and configure email security gateways to protect against phishing and malware.
• Implement policies for encryption, filtering, and safe attachments.
• Monitor email traffic for security threats.
• Conduct threat analysis and adjust email security configurations.
• Review reports on email security performance and incidents.

General Responsibilities:

• Collaborate with IT and business teams to align security measures.
• Stay updated on security technologies, trends, and best practices.
• Participate in incident response during security breaches.
• Ensure compliance with relevant regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS).
• Provide training and support to staff on security tools and practices.
• Maintain comprehensive documentation for configurations, policies, incidents, and resolutions.