Cybersecurity Engineer

Role purpose

Carry out technical security work assigned by the division lead across Giga's networks, platforms and applications. Work alongside the lead on operations and projects, coordinating with NOC, IT Systems and development to protect critical services.

Assigned responsibilities

• Configure and maintain security controls assigned for a task, such as firewalls, WAF, VPN, MFA, identity and segmentation.

• Perform assigned network, infrastructure, application and API security reviews; document findings and proposed controls for the division lead.

• Apply and check approved security baselines on specified devices, servers, management paths and virtual infrastructure with the owning teams.

• Connect specified devices and services to logging and monitoring platforms; validate the quality and coverage of their telemetry.

• Investigate assigned vulnerabilities and misconfigurations, support remediation with owners and verify fixes within an approved scope.

• Support incident investigations and perform predefined containment only when authorized, coordinating with NOC, IT and service owners.

• Support assigned ISP and customer-facing work, including DDoS, abuse, reseller access, edge exposure and routing security.

• Complete delegated project tasks and document changes, tests, rollback steps and handovers for the division lead's review.

Authority and access

Each assignment identifies the systems, permitted actions and expected deliverables. Administrative access is granted only where needed for the approved task; read access applies elsewhere by default. Containment follows the incident plan and emergency escalation path. The division lead reviews work; business risk acceptance and materially disruptive changes follow the authorized approval path.

Required profile

• Practical experience with network security, firewalls, VPNs, web or API protection, TCP/IP, DNS and secure remote access.

• Ability to troubleshoot from configurations, logs and packet captures and to work with Windows, Linux and virtualized systems.

• Sound change discipline, clear technical documentation and the ability to coordinate remediation across teams.

Useful experience: ISP or telecom networks, Fortinet technologies, identity and MFA, SIEM integration, scripting, and application security. Relevant education, training or equivalent hands-on experience is accepted.