Role & responsibilities Security Implementation and Automation: Design, implement, and automate security controls for a wide range of technologies, including Active Directory, firewalls, networking, cloud environments (AWS, Azure, GCP), and operating systems (Windows, Linux, macOS). Monitoring, Detection, and Response: Identity and Access Management Security Architecture and Risk Management: Participate in the development and enforcement of security policies, procedures, and standards to ensure compliance with regulatory frameworks such as ISO27001, NIST and NIS2. Work collaboratively with cross-functional teams (Global Infrastructure , Regional Local IT, ERP, etc.) to integrate security practices into IT operations. Cybersecurity Awareness & Training Preferred candidate profile Qualifications: Experience: University-level thinking and 5+ years of hands-on experience in the following areas: Security control implementations for technologies including Active Directory, firewalls, networking (VPNs, proxies, IDS/IPS), cloud services (AWS, Azure, GCP), and operating systems (Windows, Linux, macOS). Security tool integration and automation using tools like, CrowdStrike, Splunk, Palo Alto, Qualys, and others. Implementing defense-in-depth security designs for corporate and production infrastructure. Scripting and automation of security tasks using Python, PowerShell, Bash, or similar languages. Working with SIEM systems, including log aggregation, alerting, and automated response mechanisms. Technical Skills: Expertise in Identity and Access Management concepts such as OAuth2, SSO, SAML, Federated Identity, and RBAC. Deep understanding of network security concepts (e.g., firewall configuration, network segmentation, proxies, and IPS/IDS systems). Strong knowledge of endpoint security, threat detection, and incident response, specifically leveraging tools like CrowdStrike for endpoint monitoring and response. Experience with application security practices such as SAST, DAST, and WAF implementations. Familiarity with compliance frameworks, NIST, and ISO, and ensuring systems and infrastructure meet these standards. Experience in cybersecurity in manufacturing sites /OT domains is preferred Certifications (Preferred): SANS GIAC, CISSP, ISC2, ISACA, OSCP/OSCE, or equivalent security certifications. Additional Requirements: Ability to work in a fast-paced, dynamic environment with minimal supervision. Strong communication skills (English Verbal and writing required) and ability to collaborate effectively with cross-functional teams. Willingness to participate in on-call rotations for critical issues.
