InfoSec Security Engineer

Job Description

As a successful candidate you will have functional and/or technical experience in supporting security technologies including detailed knowledge of many of the following: Cloud Operations, AWS, Digital Ocean, On Premises, technologies, networking concepts & mechanisms, Firewalls, Proxies, EDR, AV/AM, Vulnerability Scanning, IPS/IDS, Scripting in Python or other languages, DNS, Encryption, SIEM, E-Mail technologies including DMARC, DKIM, SMTP, TLS, and other relevant technologies and work with internal and external groups to ensure the related systems are secure and robust.

• Document the security assessments, to be able to work on RFP for security compliance needs, findings, and remediation plans to ensure traceability and compliance with regulatory requirements.
• Collaborate with third-party vendors and partners to evaluate the security of their systems and integrations
• Participate in incident response activities, investigating and resolving security incidents in a timely manner.
• Conduct comprehensive security assessments and penetration testing of our systems, networks, and applications using industry-grade tools and techniques.
• Identify vulnerabilities, weaknesses, and potential threats in our infrastructure and provide actionable recommendations to mitigate risks.
• Collaborate with cross-functional teams to design and implement security controls, ensuring that our systems meet industry standards and best practices.
• Stay up-to-date with the latest security trends, threats, and technologies, and provide insights and recommendations to enhance our security posture.
• Perform code review and analysis to identify security flaws and suggest remediation strategies.
• Develop and maintain security testing methodologies, tools, and frameworks to streamline the testing process.
• Conduct security training and awareness programs for employees to promote a culture of security awareness and best practices.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Strong experience in security testing, including vulnerability assessments, penetration testing, and code review.
• Proficiency in using industry-grade security testing tools.
• In-depth knowledge of web application security, network protocols, operating systems, and cloud platforms.
• Familiarity with security frameworks and standards such as OWASP, NIST, ISO 27001, and PCI DSS.
• Experience with scripting languages (e.g., Python, Ruby, PowerShell) for automation and tool development.
• Excellent analytical and problem-solving skills, with the ability to think like an attacker and anticipate potential security risks.
• Strong analytical skill for making security policies for company and review the
• Strong communication and collaboration skills to work effectively with cross-functional teams.
• Relevant certifications such as CEH, CISSP, OSCP, or GIAC certifications are a plus.
• Knowledge of secure coding practices and familiarity with secure SDLC methodologies.
• The ability to train & coach staff in technical processes and practices.
• InfoSec Security Engineer

• Master's degree in Computer Science, Information Security, or a related field.
• Min 3 4 years

Preference

NA