Information Security Engineer

We are seeking a skilled and motivated Information Security Engineer to safeguard our organization's IT infrastructure, applications, networks, and sensitive data from evolving security threats. The successful candidate will play a crucial role in identifying vulnerabilities, implementing effective security controls, monitoring potential risks, and ensuring adherence to information security policies and industry best practices.

Key Responsibilities

- Implement, maintain, and enhance information security controls across systems, networks, applications, and infrastructure.
- Conduct vulnerability assessments, security reviews, and authorized penetration testing to identify security weaknesses.
- Monitor security alerts, investigate suspicious activities, and assist in incident response efforts.
- Configure and manage security tools such as firewalls, endpoint protection, antivirus software, and intrusion detection/prevention systems.
- Perform security assessments on applications, APIs, servers, and network infrastructure components.
- Support access control management, including identity and access management (IAM) and multi-factor authentication (MFA).
- Assist with secure system configurations, patch management, and vulnerability remediation processes.
- Contribute to the development and maintenance of information security policies, procedures, and technical documentation.
- Participate in risk assessments, security audits, and compliance activities to meet regulatory requirements.
- Collaborate closely with software developers, system administrators, and IT teams to resolve security issues.
- Promote security awareness and encourage secure development and operational practices across the organization.
- Stay informed about emerging cybersecurity threats, vulnerabilities, and advances in security technologies.

Required Qualifications

- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
- 1 to 3 years of relevant experience in information security, cybersecurity, IT security, or a related discipline.
- Solid understanding of networking fundamentals including TCP/IP, DNS, VPNs, and firewalls.
- Knowledge of operating system security, particularly Windows and Linux environments.
- Familiarity with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
- Awareness of common security risks including the OWASP Top 10, phishing, malware, and unauthorized access.
- Understanding of authentication, authorization, encryption, and access control principles.
- Experience with security incident handling, log analysis, and vulnerability remediation.
- Strong analytical, troubleshooting, and problem-solving abilities.
- Effective communication skills and the ability to work collaboratively with technical teams.

Preferred Qualifications

- Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
- Experience with Security Information and Event Management (SIEM) tools like Microsoft Sentinel, Splunk, or QRadar.
- Basic knowledge of cloud security concepts across platforms such as AWS, Microsoft Azure, or Google Cloud.
- Familiarity with security frameworks including ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
- Experience with security automation or scripting languages such as Python, PowerShell, or Bash.

What We Offer

- Competitive salary commensurate with skills and experience.
- Opportunities for professional growth and support for obtaining technical certifications.
- Exposure to modern security tools and cutting-edge technologies.
- A collaborative and supportive work environment.
- The chance to make a meaningful impact by contributing to security improvements and risk mitigation efforts.

This role offers an excellent opportunity for a driven security professional to advance their career while helping to protect critical organizational assets.