Security Engineer

Responsibilities of Security Engineer

• Lead and manage a team of security engineers, fostering a culture of collaboration, accountability, and efficiency.
• Develop, implement, and monitor security measures for the protection of computer systems, networks, and information.
• Identify and define system security requirements.
• Design computer security architecture and develop detailed cyber security designs.
• Prepare and document standard operating procedures and protocols.
• Configure and troubleshoot security infrastructure devices.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Ensure that the company knows as much as possible, as quickly as possible about security incidents.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Oversee the development and implementation of DevSecOps and CI/CD pipelines.
• Manage and ensure the security of cloud infrastructure.
• Implement and manage Infrastructure as Code (IaC) practices.
• Conduct regular security audits and risk assessments to identify potential vulnerabilities and implement corrective actions.
• Stay updated on the latest industry trends, threats, and security technologies to ensure the company's security solutions are robust and current.
• Provide training and guidance to team members and other employees on cybersecurity best practices.

Functional Competencies

• Security Engineer: The candidate should have a deep understanding of IT security and cyber security strategies. They should be able to design, implement, and maintain security systems to ensure the protection of the company's data and infrastructure.
• DevSecOps: The candidate should have experience in integrating security into DevOps practices. They should be able to identify security issues and implement solutions in the development process.
• CI/CD pipelines: The candidate should have experience in creating and managing Continuous Integration/Continuous Deployment pipelines. They should be able to automate the software release process and improve the speed and quality of deployments.
• Cloud Security: The candidate should have knowledge of cloudbased security systems and protocols. They should be able to design and implement security measures for cloudbased systems and data.
• Infrastructure as Code (IaC): The candidate should have experience in managing and provisioning computing infrastructure through machinereadable definition files, rather than physical hardware configuration.