Information Technology Security Engineer

Job Summary:

We are seeking a highly skilled and motivated IT Security Engineer to join our dynamic IT team. The ideal candidate will be responsible for designing, implementing, and maintaining the security infrastructure of the organization, ensuring that all systems, networks, and applications are protected from cyber threats and vulnerabilities. As an IT Security Engineer, you will play a crucial role in safeguarding our company's data, systems, and sensitive information.

Key Responsibilities:

• Security Infrastructure Management:
• Implement, manage, and continuously improve security solutions, such as firewalls, intrusion detection/prevention systems (IDS/IPS), and encryption tools to ensure the safety of all IT systems.
• Vulnerability Assessment & Remediation:
• Perform regular security assessments, penetration testing, and vulnerability scanning on systems and applications to identify weaknesses, and work on remediation efforts.
• Incident Response & Investigation:
• Respond to security incidents and breaches, investigate root causes, and collaborate with relevant teams to remediate and mitigate damage. Prepare incident reports and recommend improvements to prevent future breaches.
• Access Control & Identity Management:
• Oversee and enforce access control policies and procedures to ensure only authorized personnel have access to sensitive information and systems. Manage identity and access management (IAM) tools.
• Compliance & Risk Management:
• Ensure the company adheres to regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS) and internal security policies. Conduct risk assessments and audits to maintain compliance and mitigate potential threats.
• Security Monitoring & Reporting:
• Continuously monitor network traffic, logs, and other security metrics to detect potential threats. Produce reports and dashboards for management to track the health of the organization’s security posture.
• Collaboration & Knowledge Sharing:
• Work closely with IT teams, developers, and other departments to integrate security into all aspects of the organization's operations. Share security best practices with colleagues and provide training as needed.

Qualifications:

• Education:
• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• Experience:
• Minimum of 5+ years of experience in IT security, network security, or a related field.
• Hands-on experience with security technologies such as firewalls, VPNs, IDS/IPS, SIEM systems, endpoint security, and encryption.
• Experience in incident response, threat hunting, and conducting security assessments.
• Familiarity with cloud security practices and solutions (e.g., AWS, Azure, GCP) is a plus.
• Certifications:
• CISSP (Certified Information Systems Security Professional), CEH (Certified Ethical Hacker), or other industry-recognized security certifications preferred.
• Other relevant certifications such as CompTIA Security+, CISM, or CISA are a plus.