Information Security Engineer III

Key responsibilities:

Developing and implementing automated systems (Python/Bash) to identify known security
exposures and Engineering security infrastructure to optimize efficiency, expand capabilities,
meet client requirements
Supporting security infrastructure and act as an escalation point for the firm in
troubleshooting/supporting any issues. (Hashicorp vault / IAM / SIEM / EDR).
Consulting on discovered security flaws, how to exploit them, and how to remediate flaws.
Participating in attack simulation exercises on a periodic basis, contribute to threat and
vulnerability management and conduct continuous assessment around the effectiveness of
defense response.
Ensuring adherence to appropriate standards, best practices, workplace policies and procedures.
Working effectively as a team member, providing hands-on support to clients, maintaining
communication and updating senior staff on progress and participate in Incident Response
procedures if/when required.

Qualifications:

5 years of relevant experience, successfully delivering in an Enterprise environment.
Bachelor/Masters of Engineering in Computer Science / Information Security / Cyber Security
Exposure to Unix/Linux environments with strong command-line and shell knowledge, along with
scripting/development capability in Python/Bash.
Strong understanding of the intelligence lifecycle and frameworks such as the Cyber Kill Chain
and MITRE ATT&CK.
Exposure to cyber threats in the financial sector, with a thorough understanding of DeFi and
Blockchain.
Experience with SIEM technologies, threat hunting, monitoring, investigations, and strong
analytical, writing, and documentation skills.
Ability to mentor and guide security analysts in cyber threat intelligence skills, work with minimal
guidance, and familiarity with tools like JIRA and Confluence.
Preferred Qualifications:

Strong knowledge of network and security tools, including IDS/IPS, NAC, DLP, VPN, firewall
management and audit, endpoint security, anti-malware, and database audit/monitoring.
Experience in secure architecture design and security implementations across systems.
Security expertise in areas such as Python, Bash, C/C++, reverse engineering, wireless
networks, web vulnerabilities (SQLi, XSS, CSRF), and exploit development.
Experience with security applications for logging, packet capture, email, directory services,
authentication, remote access, encryption, and cloud security deployment and controls (database
security is a plus).
Strong analytical, critical thinking, and communication skills, with the ability to work under
pressure, collaborate with distributed teams, and adapt to different time zones.
Self-driven mindset with a passion for learning, along