Security Engineer

· Design, implement, manage, and support enterprise security systems and technologies to protect the organization’’s information assets.

· Analyze the information security environment and develop security measures to prevent unauthorized access, modification, disclosure, or destruction of data.

· Configure, deploy, and maintain firewalls, intrusion detection/prevention systems (IDS/IPS), encryption solutions, and other security technologies.

· Investigate security incidents, conduct forensic analysis, and coordinate incident response and recovery activities.

· Develop and maintain automation scripts and tools to improve security operations, incident tracking, and response efficiency.

· Perform vulnerability assessments, penetration testing, security risk analyses, and compliance assessments.

· Design, implement, and monitor security controls for systems, applications, networks, and data.

· Collaborate with cross-functional teams to implement authentication, authorization, encryption, and identity management solutions.

· Evaluate and recommend security technologies, tools, and best practices to strengthen the organization’’s security posture.

· Develop, implement, and maintain corporate information security policies, standards, and procedures.

· Establish and maintain access control frameworks, investigate unauthorized access, and recommend corrective actions.

· Develop disaster recovery and business continuity plans to ensure the protection and recovery of critical systems and data.

· Perform regular system backups and support disaster preparedness initiatives.

· Monitor security events, identify vulnerabilities, and implement remediation strategies.

· Assess data sensitivity and recommend appropriate security controls based on business and regulatory requirements.

· Partner with infrastructure, networking, and application teams to ensure secure system design and deployment.

· Prepare technical reports, risk assessments, and documentation related to security findings and recommendations.

· Conduct security awareness training and educate employees on cybersecurity policies and best practices.

· Stay current with emerging cybersecurity threats, technologies, regulatory requirements, and industry standards.

· Support security audits, compliance initiatives, and continuous improvement of the organization’’s information security program.

· 6+ years of experience in Information Security, Cybersecurity, or a related IT security role.

· Strong experience implementing and supporting enterprise security technologies, including firewalls, IDS/IPS, endpoint protection, and encryption solutions.

· Hands-on experience with vulnerability management, risk assessments, security testing, and incident response.

· Experience conducting forensic investigations and responding to cybersecurity incidents.

· Knowledge of identity and access management (IAM), authentication, authorization, and privileged access controls.

· Experience developing security policies, standards, and governance frameworks.

· Familiarity with disaster recovery, business continuity planning, and backup strategies.

· Experience with security monitoring, SIEM platforms, and security automation tools is preferred.

· Strong understanding of networking concepts, operating systems, cloud security, and cybersecurity best practices.

· Knowledge of security frameworks and regulatory standards such as NIST, ISO 27001, CIS Controls, HIPAA, PCI-DSS, or similar.

· Excellent analytical, troubleshooting, problem-solving, and communication skills.

· Ability to work collaboratively with cross-functional teams in a fast-paced environment.

· Relevant security certifications such as CISSP, CISM, CEH, Security+, GIAC, or equivalent are preferred.