Security Engineer
Summary
Designs and implements cybersecurity controls (firewalls, EDR, IAM) and produces risk assessments, SIEM reports, and compliance documentation for an in-house IT environment.
JOB DETAILS:
Position Title: Security Engineer
Reports to: Information Security and Risk Manager
Business Line/ Department: Information Security
3. JOB PURPOSE:
The Job Holder is Responsible to. Designs, implements, and maintains cybersecurity controls and technologies across the IT environment, ensuring technical security measures are robust, current, and aligned with NCA and internal security policies.
4. Job Deliverables - Accountability
Description
Deliverables
Security architecture designs & system diagrams (network, IAM, security controls) .
Risk assessment & vulnerability reports (risk register, threat analysis).
Security monitoring dashboards & SIEM reports (threat detection, events, alerts) .
Incident response artifacts (logs, RCA reports, response playbooks).
Security configuration & hardening outputs (policies, access controls, system configs) .
Compliance & audit documentation (control evidence, regulatory alignment.
Description
Security Control Implementation
• Design and implement cybersecurity controls: firewalls, EDR, DLP, PAM, email security, and WAF.
• Harden infrastructure, endpoints, and applications in line with security baselines.
• Manage vulnerability scanning and coordinate remediation with IT teams.
Identity & Access Management
• Administer Identity and Access Management (IAM) controls including Privileged Access Management (PAM).
• Manage MFA, Conditional Access, and Zero Trust access policies.
• Conduct access reviews and enforce least privilege principles.
Requirements
6. QUALIFICATIONS, EXPERIENCE:
Minimum Qualification
Bachelor’s degree in computer science.
Certified in CompTIA Security+ / CySA+. Microsoft SC-300 or SC-100. CEH preferred.
Minimum Experience
Minimum Experience of 4–6 years in cybersecurity engineering or architecture.
Other Requirement (Skills Set)
Endpoint security: Microsoft Defender, Kaspersky
Network security: Fortinet firewalls.
Identity: Azure AD, PAM tools (CyberArk/Beyond Trust).
Vulnerability management: Qualys, Tenable, or equivalent.
NCA ECC and ISO 27001 technical controls.