Information Security Engineer

Job Summary

We are looking for a skilled and motivated Information Security Engineer to protect the organization's IT infrastructure, applications, networks, and sensitive data from security threats. The ideal candidate will help identify vulnerabilities, implement security controls, monitor potential threats, and ensure compliance with information security policies and best practices.

Key Responsibilities

• Implement, maintain, and improve information security controls across systems, networks, applications, and infrastructure.
• Identify security vulnerabilities through vulnerability assessments, security reviews, and authorized penetration testing.
• Monitor security alerts, investigate suspicious activities, and assist in responding to security incidents.
• Configure and maintain security tools, including firewalls, endpoint protection, antivirus, and intrusion detection/prevention systems.
• Perform security assessments of applications, APIs, servers, and network infrastructure.
• Assist in access control management, identity and access management (IAM), and multi-factor authentication (MFA).
• Support secure system configurations, patch management, and vulnerability remediation.
• Help develop and maintain information security policies, procedures, and technical documentation.
• Support risk assessments, security audits, and compliance requirements.
• Collaborate with software developers, system administrators, and IT teams to address security issues.
• Promote security awareness and follow secure development and operational practices.
• Stay updated on emerging cybersecurity threats, vulnerabilities, and security technologies.

Required Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 1–3 years of relevant experience in information security, cybersecurity, IT security, or a related role.
• Understanding of networking fundamentals, including TCP/IP, DNS, VPNs, and firewalls.
• Knowledge of operating system security, particularly Windows and Linux.
• Familiarity with vulnerability assessment and security testing tools such as Nessus, Nmap, Burp Suite, or OWASP ZAP.
• Understanding of common security risks, including the OWASP Top 10, phishing, malware, and unauthorized access.
• Knowledge of authentication, authorization, encryption, and access control principles.
• Familiarity with security incident handling, log analysis, and vulnerability remediation.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good communication skills and the ability to work effectively with technical teams.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or ISO/IEC 27001 Foundation.
• Familiarity with SIEM tools such as Microsoft Sentinel, Splunk, or QRadar.
• Basic understanding of cloud security across AWS, Microsoft Azure, or Google Cloud.
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
• Experience with security automation or scripting using Python, PowerShell, or Bash.

What We Offer

• Competitive salary based on skills and experience.
• Opportunities for professional development and technical certifications.
• Exposure to modern security tools and technologies.
• Collaborative working environment.
• Opportunities to contribute to security improvements and risk reduction.