Security Engineer

Summary:

• We are looking for a Security Engineer who will be responsible for designing, implementing, and maintaining security solutions to protect our organization's systems, networks, and data from cyber threats. The ideal candidate will have a strong background in information security, excellent technical skills, and a proactive approach to identifying and mitigating security risks. This role requires collaboration with cross-functional teams to ensure the security of our infrastructure and compliance with regulatory requirements.
• This is for a short term / hourly based project.

Key Responsibilities:

• Design, implement, and maintain security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and security information and event management (SIEM) solutions.
• Monitor and analyze security events and incidents to identify threats, vulnerabilities, and security breaches.
• Conduct security assessments, vulnerability scans, and penetration tests to identify and remediate security weaknesses in systems and applications.
• Develop and enforce security policies, standards, and procedures to ensure compliance with industry regulations and best practices.
• Manage security infrastructure and tools, including patch management, configuration management, and log management systems.
• Collaborate with IT teams to integrate security controls into systems and applications throughout the software development lifecycle (SDLC).
• Respond to security incidents in a timely manner, following incident response procedures and coordinating with internal stakeholders and external partners as needed.
• Provide security guidance and support for IT projects, initiatives, and migrations to ensure security requirements are met.
• Stay updated on emerging threats, vulnerabilities, and security technologies to proactively mitigate risks and improve security posture.
• Participate in security awareness training and education programs for employees to promote a culture of security awareness and compliance.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in information security or a related role.
• Strong understanding of networking concepts, protocols, and architectures, including TCP/IP, DNS, VPN, and routing protocols.
• Hands-on experience with security technologies and tools, such as firewalls, IDS/IPS, SIEM, antivirus, and vulnerability scanners.
• Knowledge of security principles, practices, and standards, including risk management, encryption, authentication, and access control.
• Experience with security assessment and testing methodologies, including penetration testing, vulnerability scanning, and social engineering.
• Familiarity with regulatory compliance requirements, such as GDPR, HIPAA, PCI DSS, and industry standards like NIST Cybersecurity Framework or ISO/IEC 27001.
• Certifications such as CISSP, CISM, CEH, or GIAC are preferred.
• Excellent analytical and problem-solving skills with the ability to troubleshoot complex security issues.
• Strong communication and collaboration skills with the ability to work effectively in a team environment.

ijnGPlhkgh