Security Engineer

Description:

Job Summary:

The Security Engineer will play a critical role in protecting the company’s digital assets, infrastructure, and data by designing, implementing, and maintaining security protocols, tools, and processes. They will work closely with IT, DevOps, and compliance teams to ensure the organization maintains a strong security posture.

Key Responsibilities:

• Design, implement, and manage security tools, such as firewalls, intrusion detection systems (IDS/IPS), endpoint protection, Splunk, and SIEM.
• Monitor networks and systems for security breaches, using security tools and log analysis.
• Perform vulnerability assessments and penetration testing; collaborate with teams to remediate identified risks.
• Develop and enforce security policies, standards, and procedures.
• Investigate security incidents and implement incident response plans.
• Support compliance efforts (e.g., SOC 2, ISO 27001, HIPAA, GDPR) by ensuring security controls are in place.
• Work with software developers and DevOps teams to ensure secure coding practices and secure cloud/infrastructure configurations.
• Stay up-to-date with current threats and security technologies; recommend and implement improvements.

Requirements:

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
• 3+ years of experience in a security engineering or cybersecurity role.
• Strong understanding of networking, firewalls, VPNs, and protocols (TCP/IP, HTTP/S, DNS, etc.).
• Experience with cloud platforms (AWS, Azure, GCP) and cloud security best practices.
• Familiarity with SIEM, Splunk, endpoint security, vulnerability scanners, and other cybersecurity tools.
• Knowledge of scripting or programming languages (e.g., Python, Bash, PowerShell) a plus.
• Security certifications such as CISSP, CEH, OSCP, or Security+ preferred.

Preferred Skills:

• Experience with container security (Docker, Kubernetes).
• Hands-on experience with incident response and forensic investigations.
• Familiarity with DevSecOps practices and CI/CD pipelines.
• Excellent analytical and problem-solving skills.