Information Security Engineer

We are seeking a skilled and motivated Information Security Engineer to safeguard our organization's IT infrastructure, applications, networks, and sensitive data from evolving security threats. The successful candidate will play a vital role in identifying vulnerabilities, implementing robust security controls, monitoring potential threats, and ensuring compliance with established information security policies and industry best practices.

Key Responsibilities

- Implement, maintain, and enhance information security controls across systems, networks, applications, and infrastructure to protect organizational assets.
- Conduct vulnerability assessments, security reviews, and authorized penetration testing to identify and address security weaknesses.
- Monitor security alerts, investigate suspicious activities, and assist in responding promptly to security incidents.
- Configure and manage security tools such as firewalls, endpoint protection, antivirus software, and intrusion detection/prevention systems.
- Perform comprehensive security assessments of applications, APIs, servers, and network infrastructure components.
- Support access control management, including identity and access management (IAM) and multi-factor authentication (MFA) implementation.
- Assist with secure system configurations, patch management, and remediation of identified vulnerabilities.
- Contribute to the development and maintenance of information security policies, procedures, and technical documentation.
- Participate in risk assessments, security audits, and ensure compliance with relevant regulations and standards.
- Collaborate closely with software developers, system administrators, and IT teams to resolve security issues effectively.
- Promote security awareness across the organization and advocate for secure development and operational practices.
- Stay informed about emerging cybersecurity threats, vulnerabilities, and advancements in security technologies.

Required Qualifications

- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
- 1 to 3 years of professional experience in information security, cybersecurity, IT security, or a related discipline.
- Solid understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewall configurations.
- Knowledge of operating system security, particularly for Windows and Linux environments.
- Experience with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
- Awareness of common security risks, including the OWASP Top 10 vulnerabilities, phishing attacks, malware threats, and unauthorized access.
- Understanding of authentication, authorization, encryption, and access control mechanisms.
- Familiarity with security incident handling, log analysis, and vulnerability remediation processes.
- Strong analytical, troubleshooting, and problem-solving skills.
- Effective communication skills and the ability to collaborate with technical teams.

Preferred Qualifications

- Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
- Experience with Security Information and Event Management (SIEM) tools like Microsoft Sentinel, Splunk, or QRadar.
- Basic knowledge of cloud security principles across platforms such as AWS, Microsoft Azure, or Google Cloud.
- Familiarity with security frameworks including ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
- Experience with security automation or scripting languages such as Python, PowerShell, or Bash.

What We Offer

- Competitive salary commensurate with skills and experience.
- Opportunities for professional growth and support for obtaining technical certifications.
- Exposure to modern security tools and cutting-edge technologies.
- A collaborative and supportive working environment.
- The chance to contribute meaningfully to enhancing security posture and reducing organizational risk.