Cyber Security Consultant

Job Summary:

The Cybersecurity Engineer is responsible for safeguarding the organizations information systems, networks, and data against cyber threats. This role involves implementing and managing security solutions, monitoring for vulnerabilities, responding to incidents, and ensuring compliance with cybersecurity standards and regulations.

Key Responsibilities:

• Design, implement, and manage security tools, systems, and processes (firewalls, IDS/IPS, SIEM, antivirus, etc.).
  
• Conduct vulnerability assessments, penetration testing, and security audits.
  
• Monitor networks and systems for potential threats or suspicious activity.
  
• Respond to and investigate security incidents, breaches, and anomalies.
  
• Develop and enforce security policies, standards, and procedures.
  
• Manage identity and access controls (IAM) across systems and applications.
  
• Collaborate with IT and DevOps teams to integrate security into all stages of system development (DevSecOps).
  
• Maintain up-to-date knowledge of emerging threats, vulnerabilities, and mitigation techniques.
  
• Train and raise awareness among staff on security best practices and phishing prevention.
  
• Ensure compliance with regulations such as GDPR, ISO 27001, NIST, and HIPAA (as applicable).
  
• Support disaster recovery and business continuity planning.
  

Required Qualifications and Skills:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
  
• 2–5 years of experience in cybersecurity, information security, or related IT roles.
  
• Strong understanding of network security, operating systems (Windows/Linux), and cloud security.
  
• Experience with security technologies such as:
  
• Firewalls, VPNs, and endpoint protection
  
• SIEM tools (Splunk, QRadar, ELK, Sentinel)
  
• IDS/IPS systems
  
• Vulnerability scanners (Nessus, Qualys)
  
• Knowledge of cyber threat intelligence, incident response, and forensics.
  
• Understanding of encryption, PKI, identity management, and access control.
  
• Familiarity with frameworks such as NIST, CIS Controls, and ISO 27001.
  
• Strong analytical, problem-solving, and communication skills.
  

Preferred Skills (Nice to Have):

• Experience with cloud security (AWS, Azure, GCP).
  
• Hands-on knowledge of DevSecOps tools and secure coding practices.
  
• Exposure to SOC (Security Operations Center) environments.
  
• Knowledge of compliance standards (PCI DSS, HIPAA, GDPR).
  
• Experience with automation and scripting (Python, PowerShell, Bash).