Information Security Engineer

We are seeking an experienced Network Security Engineer to join our company. This position ensures the proper deployment, operations, and maintenance of corporate environment as as cloud security, firewalls, secure remote access, endpoint security protection and detection, incidenet response and systems hardening and implementation while following security best practices, standards, policies and procedures.

Responsibilities:

• Design, develop, implement and support various security technologies, controls and tools in corporate environment;
• Hands on assessing, hardening and patching security systems;
• Respond and investigate potential security, events, alerts and incidents;
• Collaborate with business owners, product managers, DevOps, IT operations and development teams, to provide subject matter expertise for information security matters;
• Identify weak or missing controls and vulnerabilities while suggesting improvements and remediation;
• Implement and manage security tools like Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) within the CI/CD pipeline.

Requirements & Skills:

• 3-5 years of relevant work in a hands-on position as Security Expert / Engineer;
• Strong understanding of Networking principles, IT/Information Security;
• Solid experience in crypto/blockchain industry, at least 3 years in Web3 related;
• Well familiar with blockchain security, in particular as a Security SME of Exchange and/or Hot/Cold wallet;
• Proven working and hands-on experience with 1) Firewalls (Fortigates), 2) VPN (ipsec between on-premise firewall and cloud, SSLVPN for user access), 3) Endpoint Security Systems and Technologies to support both Linux and Windows operating system flavors, 4) Incident Response and Methodologies;
• Experience with Microsoft 365 Security - Microsoft Defender is an advantage;
• Experience with DDOS and WAF protection on Cloudflare, Imperva;
• Hands on experience on Nessus Scanner or any other vulnerabilities scanning tools;
• Excellent spoken and written communication skills;
• Security mindset with business enablement strategy thinking;
• CCNP Security, Microsoft Certified: Security Operations Analyst, Identity and Access Administrator or similar security certifications is an advantage.