Information Security Engineer

Key Responsibilities:

• Design and Implement Security Measures: Develop, implement, and manage security protocols and solutions to ensure the integrity of the organizations network and systems.
• Risk Assessment and Vulnerability Management: Identify security risks and weaknesses, and take proactive measures to mitigate them, including regular vulnerability scans, patch management, and penetration testing.
• Incident Detection and Response: Monitor systems for unusual activity, investigate incidents, and provide recommendations for resolution. Respond swiftly to security breaches and incidents.
• Security Audits and Compliance: Conduct regular security audits and ensure compliance with internal policies, external regulations, and standards such as ISO 27001, PCI-DSS, GDPR, etc.
• Collaboration and Communication: Work with cross-functional teams including IT, development, and operations to ensure security is integrated into all stages of the development lifecycle. Provide security training and awareness to staff.
• Monitoring and Analysis: Utilize security tools (such as SIEM, IDS/IPS, firewalls) to continuously monitor network traffic, systems, and applications for potential threats.
• Documentation and Reporting: Document security procedures, incidents, and actions taken. Prepare reports for management on security status and performance.

Key Skills/ Experience/Qualifications

• Bachelors Degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Proven experience (typically 3-5 years) in a security-related role, such as network security, application security, or system security.
• Solid understanding of security protocols, cryptography, and security standards.
• Familiarity with security tools (e.g., SIEM, PAM, DAM, firewalls, intrusion detection systems) and operating systems (Linux, Windows, etc.).
• Experience with vulnerability scanning, penetration testing, and threat modeling.
• Knowledge of regulatory requirements and industry standards (e.g., NIST, ISO 27001, PCI-DSS, IM8, CSA CCOP).
• Excellent problem-solving and analytical skills.

• Strong communication skills, with the ability to explain technical security concepts to non-technical stakeholders.
• Certifications such as CISSP, CISM, CEH, or CompTIA Security+ are highly desirable.
• Familiarity with DevSecOps practices and tools.
• Experience in network security, including firewall management, VPNs, and IDS/IPS systems.
• Familiarity with scripting languages such as Python, Bash, or PowerShell

EA Number: 11C4879

Skills

Liaising with cross functional teams, SIEM, Audit and Compliance, Security Tools, Vulnerability Scanning, Development, ISO 27000, Patch Management, Security Education and Awareness, System Integrity, PCI DSS, Issue Resolution, Penetration Testing, Monitoring Traffic, Vulnerability Assessment, Firewall Management, Threat and Vulnerability Management, Security Incident Response