Information Security Engineer

We are seeking a skilled and motivated Information Security Engineer to safeguard our organization's IT infrastructure, applications, networks, and sensitive data from security threats. The successful candidate will play a key role in identifying vulnerabilities, implementing security controls, monitoring potential threats, and ensuring compliance with information security policies and industry best practices.

Key Responsibilities

- Implement, maintain, and enhance information security controls across systems, networks, applications, and infrastructure.
- Conduct vulnerability assessments, security reviews, and authorized penetration testing to identify security weaknesses.
- Monitor security alerts, investigate suspicious activities, and assist in responding to security incidents promptly.
- Configure and manage security tools such as firewalls, endpoint protection, antivirus, and intrusion detection/prevention systems.
- Perform security assessments on applications, APIs, servers, and network infrastructure to ensure robust protection.
- Assist with access control management, including identity and access management (IAM) and multi-factor authentication (MFA).
- Support secure system configurations, patch management, and vulnerability remediation efforts.
- Contribute to the development and maintenance of information security policies, procedures, and technical documentation.
- Support risk assessments, security audits, and compliance initiatives to meet regulatory requirements.
- Collaborate closely with software developers, system administrators, and IT teams to resolve security-related issues.
- Promote security awareness and encourage secure development and operational practices across the organization.
- Stay informed about emerging cybersecurity threats, vulnerabilities, and advancements in security technologies.

Required Qualifications

- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
- 1 to 3 years of relevant experience in information security, cybersecurity, IT security, or a similar role.
- Solid understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewalls.
- Knowledge of operating system security, particularly Windows and Linux environments.
- Familiarity with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
- Awareness of common security risks, including the OWASP Top 10, phishing, malware, and unauthorized access.
- Understanding of authentication, authorization, encryption, and access control principles.
- Experience with security incident handling, log analysis, and vulnerability remediation.
- Strong analytical, troubleshooting, and problem-solving skills.
- Effective communication skills and the ability to work collaboratively with technical teams.

Preferred Qualifications

- Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
- Experience with SIEM tools like Microsoft Sentinel, Splunk, or QRadar.
- Basic knowledge of cloud security across platforms such as AWS, Microsoft Azure, or Google Cloud.
- Familiarity with security frameworks including ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
- Experience with security automation or scripting using Python, PowerShell, or Bash.

What We Offer

- Competitive salary commensurate with skills and experience.
- Opportunities for professional growth and support for obtaining technical certifications.
- Exposure to modern security tools and cutting-edge technologies.
- A collaborative and supportive working environment.
- The chance to contribute meaningfully to security improvements and risk reduction initiatives.