Security Engineer

Job Description

Job Description

Responsibilities :

• Conduct thorough investigations and offer guidance on the most current security-related risks, threats, and vulnerabilities. This will involve managing security incidents, overseeing external security reviews, and performing penetration tests to ensure the robustness of our infrastructure's security posture.
• Collaborate on the development of Information Security policies, standards, and baselines. Your input will contribute to assessing compliance efforts.
• Monitor, evaluate, and execute network penetration tests, vulnerability assessment scans, and risk evaluation reviews.
• Define and present key security metrics to influence trends in remediation strategies.
• Communicate findings and provide recommendations to stakeholders during remediation processes as necessary.
• Work closely with IT Operations, architecture, and project teams to design and implement security controls based on policies, standards, and industry best practices.
• Coordinate vulnerability assessments, review assessment results, guide patching, and lead or offer advice on remediation activities related to various IT infrastructure technologies such as BU OS, Middleware, Unix / Linux Servers, Storage, Databases, Appliances, Web Applications, Network Devices, malware tools, IDS / IPS, encryption, etc.
• Contribute to consistent governance reporting by providing results and metrics. You will also collaborate on and organize remediation plans and efforts.
• Engage in research to develop testing tools, techniques, and process enhancements.
• Effectively explain, demonstrate, and document the operational implications of specific security vulnerabilities or loopholes.
• Analyze vulnerability findings and suggest corrective actions and security strengthening measures.
• Manage and configure NGFW, WAF, and NSG.
• Implement Data Loss Prevention (DLP) solutions to enhance data security.
• Provide mentorship, guidance, and knowledge-sharing within the team.
• As needed, offer recommendations, explanations, and guidance on your area of expertise to other teams in the organization.
• Comprehend the Scope of Work for each engagement.
• Proactively recognize security risks and define security requirements and controls to mitigate these risks.
• Carry out your duties in a secure, organized, and professional manner.

Requirements :