Information Security Engineer

Key Responsibilities:

• Design and Implement Security Measures: Develop, implement, and manage security protocols and solutions to ensure the integrity of the organizations network and systems.
• Risk Assessment and Vulnerability Management: Identify security risks and weaknesses, and take proactive measures to mitigate them, including regular vulnerability scans, patch management, and penetration testing.
• Incident Detection and Response: Monitor systems for unusual activity, investigate incidents, and provide recommendations for resolution. Respond swiftly to security breaches and incidents.
• Security Audits and Compliance: Conduct regular security audits and ensure compliance with internal policies, external regulations, and standards such as ISO 27001, PCI-DSS, GDPR, etc.
• Collaboration and Communication: Work with cross-functional teams including IT, development, and operations to ensure security is integrated into all stages of the development lifecycle. Provide security training and awareness to staff.
• Monitoring and Analysis: Utilize security tools (such as SIEM, IDS/IPS, firewalls) to continuously monitor network traffic, systems, and applications for potential threats.
• Documentation and Reporting: Document security procedures, incidents, and actions taken. Prepare reports for management on security status and performance.

Key Skills/ Experience/Qualifications

• Bachelors Degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Proven experience (typically 3-5 years) in a security-related role, such as network security, application security, or system security.
• Solid understanding of security protocols, cryptography, and security standards.
• Familiarity with security tools (e.g., SIEM, PAM, DAM, firewalls, intrusion detection systems) and operating systems (Linux, Windows, etc.).
• Experience with vulnerability scanning, penetration testing, and threat modeling.
• Knowledge of regulatory requirements and industry standards (e.g., NIST, ISO 27001, PCI-DSS, IM8, CSA CCOP).
• Excellent problem-solving and analytical skills.

• Strong communication skills, with the ability to explain technical security concepts to non-technical stakeholders.
• Certifications such as CISSP, CISM, CEH, or CompTIA Security+ are highly desirable.
• Familiarity with DevSecOps practices and tools.
• Experience in network security, including firewall management, VPNs, and IDS/IPS systems.
• Familiarity with scripting languages such as Python, Bash, or PowerShell

EA Number: 11C4879