Sr. Engineer I - Cybersecurity

Infrastructure & Network Security

• Secure and manage on-premise infrastructure (servers, firewalls, internal services)
• Configure and monitor firewalls, VPNs, and network segmentation
• Design secure access controls for internal tools (Git, project management, storage, etc.)
• Harden Linux/Windows systems and enforce baseline configurations

Threat Detection & Monitoring

• Deploy and manage SIEM / EDR solutions (e.g., Wazuh, OSSEC, etc.)
• Monitor logs, detect anomalies, and respond to incidents
• Reduce noise and improve signal quality in alerts (tuning rules, filtering)

Application & Dev Security

• Work with dev teams to secure APIs and external endpoints
• Conduct vulnerability assessments and basic penetration testing
• Review authentication, authorization, and secrets management practices

Endpoint & Identity Security

• Manage endpoint security (laptops, workstations)
• Implement device control, patching, and MDM (if applicable)
• Strengthen identity systems (SSO, MFA, role-based access)

Incident Response

• Investigate security events and lead response actions
• Build incident response playbooks
• Perform root cause analysis and recommend fixes

Compliance & Best Practices

• Implement security practices aligned with defense sector expectations
• Maintain documentation for audits and internal processes
• Balance security with usability in a fast-moving startup