Security Engineer

About the Role:

You will play a crucial role in protecting our organization from cyber threats.

Responsibilities:

• Monitor security systems and logs for suspicious activity.
• Analyze security events and incidents to identify root causes and develop appropriate responses.
• Investigate security incidents and breaches, including malware infections, phishing attacks, and network intrusions.
• Develop and implement security tools and technologies to enhance our security posture.
• Contribute to the development and maintenance of security policies, procedures, and standards.
• Conduct security assessments and vulnerability scans to identify and mitigate security weaknesses.
• Collaborate with other IT teams to implement security best practices.
• Stay up-to-date with the latest security threats and vulnerabilities.
• Participate in incident response activities and provide technical expertise.
• Document security incidents and investigations.
• Contribute to the continuous improvement of our security operations.
• Develop and deliver security awareness training to employees.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in a Security Operations Center (SOC) environment.
• Strong understanding of security concepts and principles.
• Experience with security monitoring tools (e.g., SIEM, IDS/IPS).
• Knowledge of network security protocols and technologies.
• Experience with incident response procedures.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.
• Strong understanding of common security vulnerabilities and attack vectors.

Preferred Qualifications:

• Experience with scripting languages (e.g., Python, Bash, PowerShell).
• Experience with cloud security (e.g., AWS, Azure, GCP).
• Experience with penetration testing and vulnerability assessment tools.
• Relevant security certifications (e.g., Security+, CISSP, CEH).
• Experience with threat intelligence platforms.
• Familiarity with regulatory compliance frameworks (e.g., NIST, ISO 27001, HIPAA).