{"id":3607719,"url":"https://alion.io/job/arm-information-security-engineer","title":"Information Security Engineer","company":{"id":705796,"name":"ARM","domain":"arm.com.ng","url":"https://alion.io/company/arm-4","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SeamlessHiring","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lagos, Nigeria"],"countries":["NG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"Burp Suite","optional":true},{"name":"Crowdstrike","optional":true},{"name":"FortiGate","optional":true},{"name":"IAM","optional":true},{"name":"IBM QRadar","optional":true},{"name":"ITIL","optional":true},{"name":"Kali Linux","optional":true},{"name":"Linux","optional":true},{"name":"Metasploit","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Nessus","optional":true},{"name":"Nmap","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Sophos","optional":true},{"name":"Splunk","optional":true},{"name":"SQLmap","optional":true},{"name":"VPN","optional":true},{"name":"Windows Server","optional":true},{"name":"Wireshark","optional":true}],"status":"live","first_seen_at":"2026-11-02T12:26:18Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-06T22:06:33Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Information Security Engineer with 5-6+ years of hands-on experience across Vulnerability Assessment \nand Penetration Testing (VAPT), Security Operations Centre (SOC), SIEM monitoring, network security, \nendpoint security and enterprise IT infrastructure. Experienced in assessing and testing web \napplications, APIs, mobile applications, servers, databases, network devices, cloud environments and \nenterprise endpoints; identifying security weaknesses; validating exploitability; supporting remediation; \nand conducting retesting. Strong ability to combine offensive security testing with defensive monitoring \nand incident detection to provide practical, risk-based security recommendations.\nResponsibilities\nInformation Security Engineer / VAPT & SOC Engineer\nConduct end-to-end VAPT across web applications, APIs, mobile applications, network infrastructure, servers, endpoints and enterprise IT assets.\nPerform reconnaissance, enumeration, manual validation, exploitation, privilege escalation and post-exploitation activities within approved testing scope.\nAssess authentication, authorization, session management, access control, business logic, input validation, API security, cryptography and configuration weaknesses.\nConduct internal and external network penetration tests covering network devices, exposed services, firewalls, VPNs, remote access and segmentation.\nPerform vulnerability scanning and validation; prioritize findings based on severity, exploitability and business impact.\nProduce technical VAPT reports containing evidence, risk ratings, affected assets, remediation recommendations and executive summaries.\nConduct remediation validation and retesting to confirm vulnerabilities have been effectively closed.\nSupport SOC operations through SIEM monitoring, alert investigation, event correlation, threat hunting and escalation of suspected incidents.\nDevelop, review and tune SIEM detection use cases, correlation rules, dashboards and alert thresholds.\nInvestigate suspicious endpoint, network and authentication activities using SIEM and EDR telemetry.\nPerform security configuration reviews of firewalls, servers, endpoints, Active Directory, cloud resources and critical applications.\nCollaborate with infrastructure, network, application development and IT operations teams to remediate vulnerabilities and strengthen controls.\nMonitored SIEM, EDR and security infrastructure alerts and investigated potential threats and anomalous activities.\nPerformed log analysis across authentication, network, endpoint, application and security-device sources.\nCORE COMPETENCIES\nApplication VAPT: Web Applications, APIs, Mobile Applications, Authentication & Business Logic\nNetwork VAPT: Internal/External Infrastructure, Firewalls, Routers, Switches, VPNs and Network Services\nEnterprise IT Security Assessment: Servers, Endpoints, Active Directory, Databases, Cloud and Security Devices\nSOC Operations: Security Monitoring, Alert Triage, Incident Investigation, Escalation and Response Support\nSIEM: Log Onboarding, Correlation Rules, Use Cases, Dashboards, Threat Detection and Tuning\nVulnerability Management: Scanning, Risk Rating, Remediation Tracking and Retesting\nPenetration Testing: Reconnaissance, Enumeration, Exploitation, Privilege Escalation and Reporting\nThreat Detection & Incident Response: IOC Analysis, Threat Hunting, Investigation and Evidence Preservation\nSecurity Configuration Review: Firewall, OS, Network, Cloud, Endpoint and Application Controls\nSecurity Reporting: Executive Findings, Technical Reports, Risk-Based Recommendations and Remediation Validation\nRequirements\nTECHNICAL SKILLS & TOOLS\nVAPT / Offensive Security Expected / Preferred Experience :\nBurp Suite, Nmap, Nessus/Tenable, Metasploit, Kali Linux, OWASP ZAP, SQLMap, Wireshark\nApplication Security: OWASP Top 10, OWASP ASVS, API Security, OWASP MASVS/MSTG, SAST/DAST\nSOC / SIEM : CrowdStrike Falcon/SIEM, Microsoft Sentinel, Rapid 7, Splunk, QRadar or equivalent\nEDR / XDR: CrowdStrike, Microsoft Defender, Sophos or equivalent\nNetwork Security: FortiGate, Sophos, Cisco/enterprise firewalls, VPN, IDS/IPS, NAC, segmentation\nSystems: Windows Server, Linux, Active Directory, Entra ID, databases and enterprise applications\nCloud Security: AWS/Azure fundamentals, IAM, logging, security groups and workload security\nScripting / Automation: Python, PowerShell and/or Bash\nSELECTED VAPT RESPONSIBILITIES\nWeb Application and API Penetration Testing\nMobile Application Security Testing - Android/iOS\nExternal and Internal Network Penetration Testing\nFirewall and Network Device Security Assessment\nServer and Endpoint Vulnerability Assessment\nActive Directory and Identity Security Assessment\nSIEM / SOC RESPONSIBILITIES\nSIEM deployment support and onboarding of applications, servers, network devices, cloud services and security technologies.\nCreation and tuning of security monitoring use cases for authentication, privilege escalation, malware, data exfiltration, suspicious network activity and configuration changes.\nThreat hunting using endpoint, network, identity and application telemetry.\nInvestigation and correlation of alerts across SIEM, EDR/XDR, firewall and identity platforms.\nSOC incident escalation, investigation support, root-cause analysis and lessons learned.\nEDUCATION\nB.Sc. / B.Tech. Computer Science, Cybersecurity, Information Technology or related discipline\nPROFESSIONAL CERTIFICATIONS\nRequired / Preferred: SSCP, eJPT, CEH, OSCP or equivalent offensive-security certification\nPreferred: CISSP, CCNA, GIAC, SC-900, CNSP, ITIL or equivalent security certification\nPreferred: ISO/IEC 27001 or related information-security certification","description_format":"text","description_chars":5675,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Nigeria","iso":"NG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-11-02T12:26:18Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":43,"reasons":["conf:1","velocity","win:early","comp:attention"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/arm-information-security-engineer","json_url":"https://alion.io/job/arm-information-security-engineer.json","meta":{"generated_at":"2026-11-06T23:40:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3465,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":705796},"rest":"https://alion.io/mcp/rest/get_company?id=705796"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farm-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farm-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farm-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arm-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farm-information-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3607719}},{"tool":"search_jobs","arguments":{"company":"arm.com.ng","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3607719},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}