IT Security Engineer

Job responsibilities

• Monitor SIEM platforms, IDS/IPS, and other security systems for potential threats, vulnerabilities, and security incidents.
• Respond promptly to security incidents and breaches, performing investigation, analysis, and remediation.
• Collaborate with internal teams to prioritize, address, and remediate identified security weaknesses.
• Track and manage vulnerability remediation, ensuring systems are compliant with security best practices.
• Generate weekly security reports from SIEM platforms and assist in performance metrics tracking.
• Perform vulnerability assessments, penetration tests, and security audits.
• Review and assess security architecture and overall information security posture to ensure best practices and compliance.
• Assist in the evaluation and improvement of overall security strategies and risk management.
• Monitor security alerts and manage service requests through the ticketing system, ensuring SLAs are met and issues are resolved in a timely manner.
• Monitor and maintain anti-malware compliance and detection measures.
• Support compliance-related activities, including preparing cyber advisories and staying informed on emerging threats.
• Experience with threat hunting and using advanced analytics tools to detect security anomalies.
• Familiarity with security tools such as EDR, Proofpoint, Nessus, or Qualys.
• Experience working with security automation platforms and orchestration tools.
• Knowledge of secure software development practices, including DevSecOps methodologies.
• Stay informed on the latest cyber threats, vulnerabilities, and security trends. Prepare advisories to keep stakeholders aware of critical risks.
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash) for automating security tasks and incident response processes.
• Familiarity with widely accepted security standards and frameworks (NIST, ISO 27001, CIS).
• Hands-on experience securing cloud environments (AWS, Azure, etc.) and cloud-based applications.
• Solid understanding of encryption, authentication methods, and secure network protocols.
• Ability to clearly explain complex security issues to both technical and non-technical stakeholders.

Skills

• Proficient in using security tools such as EDR, Proofpoint, Nessus, and Qualys to enhance detection and response capabilities.
• Hands-on experience securing cloud environments (AWS, Azure) and cloud-based applications while adhering to security best practices.
• Strong understanding of encryption, secure authentication methods, and network protocols to protect sensitive data.
• Expertise in monitoring SIEM platforms and security systems to detect and respond to potential threats and incidents.
• Strong experience in performing vulnerability assessments, penetration testing, and managing risk across the organization.
• Proficiency in conducting security audits and reviewing security architectures to ensure compliance with best practices.
• Experience working with security automation platforms and orchestration tools to streamline processes and improve response times.
• Expertise in threat hunting and leveraging advanced analytics tools to identify and mitigate security anomalies.
• Knowledge of secure software development practices, including the implementation of DevSecOps principles.
• Ability to stay up to date on the latest cybersecurity trends, vulnerabilities, and emerging threats, and provide actionable advisories.
• Familiarity with security standards and frameworks such as NIST, ISO 27001, and CIS, and the ability to apply them in security strategies.

Qualifications

• 2+ years of experience leading security initiatives for enterprises in an information security (InfoSec) consultant.
• CompTIA Security+, CEH (Certified Ethical Hacker), or other relevant security certifications.