Cyber Security Engineer

Job Summary

We are seeking a Mid-Senior Level Cybersecurity Engineer to protect the organization’s systems, networks, applications, and data from cyber threats. The ideal candidate will have hands-on experience with security monitoring, vulnerability management, incident response, identity and access management, and security tools. This role will work closely with IT, cloud, application, and infrastructure teams to identify security risks and implement effective security controls.

Key Responsibilities

• Monitor security events, alerts, and logs to identify potential cyber threats and suspicious activities.
• Investigate and respond to security incidents, vulnerabilities, and potential breaches.
• Conduct vulnerability assessments and coordinate remediation of security vulnerabilities.
• Implement and maintain security controls across networks, endpoints, applications, and cloud environments.
• Configure and manage security tools such as SIEM, EDR/XDR, firewalls, IDS/IPS, vulnerability scanners, and email security solutions.
• Perform threat analysis and assist with threat hunting activities.
• Support Identity and Access Management (IAM), including authentication, authorization, MFA, and privileged access controls.
• Develop and maintain security policies, procedures, standards, and technical documentation.
• Conduct security risk assessments and recommend appropriate mitigation strategies.
• Collaborate with infrastructure, DevOps, cloud, and application teams to integrate security into IT environments.
• Assist with security audits, compliance assessments, and remediation activities.
• Stay current with emerging cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• Participate in security awareness and incident-response exercises.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 5+ years of experience in cybersecurity, information security, or a related field.
• Strong understanding of cybersecurity principles, threat detection, incident response, and vulnerability management.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or similar.
• Experience with endpoint security tools such as CrowdStrike, Microsoft Defender, SentinelOne, or similar.
• Knowledge of network security concepts, including TCP/IP, DNS, VPNs, firewalls, IDS/IPS, and network segmentation.
• Experience with vulnerability assessment tools such as Nessus, Qualys, or Rapid7.
• Understanding of IAM, MFA, RBAC, SSO, and privileged access management.
• Familiarity with cloud security concepts across AWS, Azure, or Google Cloud.
• Strong analytical, troubleshooting, communication, and problem-solving skills.

Preferred Qualifications

• Professional certifications such as CISSP, Security+, CySA+, CEH, GSEC, or CCSP.
• Experience with cloud security and DevSecOps practices.
• Knowledge of frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Experience with security automation and scripting using Python, PowerShell, or Bash.
• Experience conducting threat hunting, penetration testing, or security assessments.
• Familiarity with SOAR, DLP, CASB, Zero Trust, and PAM technologies.
• Experience working in regulated environments such as financial services, healthcare, government, or technology.
• Strong understanding of security compliance and data protection requirements.