Cyber Security Engineer

Job Title: Cyber Security Engineer

Job Summary:

We are seeking a skilled and proactive Cyber Security Engineer to safeguard the organization's IT infrastructure, applications, and data from cyber threats. The ideal candidate will be responsible for implementing security controls, monitoring security events, conducting vulnerability assessments, responding to incidents, and ensuring compliance with industry security standards and best practices.

Key Responsibilities:

• Design, implement, and maintain enterprise security solutions to protect networks, systems, cloud environments, and applications.
• Monitor security events using SIEM tools and investigate suspicious activities to identify potential threats.
• Perform vulnerability assessments, penetration testing coordination, and risk analysis to identify security gaps.
• Implement security policies, access controls, endpoint protection, firewalls, IDS/IPS, and data loss prevention (DLP) solutions.
• Conduct incident detection, investigation, containment, eradication, and recovery activities during security incidents.
• Collaborate with IT, DevOps, and application teams to integrate security best practices throughout the software development lifecycle (DevSecOps).
• Ensure compliance with security standards such as ISO 27001, NIST, PCI-DSS, SOC 2, GDPR, and other applicable regulatory requirements.
• Perform security audits, log analysis, and threat hunting activities to strengthen the organization's security posture.
• Develop and maintain security documentation, incident reports, and standard operating procedures.
• Stay updated with emerging cyber threats, vulnerabilities, and security technologies while recommending appropriate mitigation strategies.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• 4 - 9 years of experience in Cyber Security, Information Security, or Network Security.
• Experience working in enterprise IT or cloud environments.

Required Skills

• Strong knowledge of network security, firewalls, VPNs, IDS/IPS, WAF, and endpoint security.
• Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, or LogRhythm.
• Experience with vulnerability assessment tools such as Nessus, Qualys, Rapid7, or OpenVAS.
• Good understanding of operating system security (Windows, Linux) and Active Directory.
• Familiarity with cloud security concepts on AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Knowledge of identity and access management (IAM), multi-factor authentication (MFA), and privileged access management (PAM).
• Experience with scripting or automation using PowerShell, Python, or Bash.
• Excellent analytical, troubleshooting, and incident response skills.

Preferred Skills:

• Experience with DevSecOps, container security (Docker, Kubernetes), and CI/CD security.
• Knowledge of Endpoint Detection & Response (EDR/XDR) tools such as CrowdStrike, Microsoft Defender, SentinelOne, or Carbon Black.
• Understanding of Zero Trust architecture, threat intelligence, and malware analysis.
• Experience in cloud security posture management (CSPM) and security automation (SOAR).
• Familiarity with security frameworks such as MITRE ATT&CK, OWASP Top 10, and CIS Controls.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• GIAC Security Certifications (GSEC, GCIH, GCIA)
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Certified Security Specialty
• Certified Cloud Security Professional (CCSP)