Cyber Executive

Job Summary

The Cyber Security Engineer is responsible for protecting the organizations systems, networks, and data from security threats. The role includes monitoring security alerts, identifying vulnerabilities, implementing security controls, and supporting incident response activities. The engineer will work with cross-functional teams to strengthen the organization’s security posture.

Key Responsibilities

1. Security Monitoring & Incident Response

• Monitor security alerts, logs, and events using SIEM tools (e.g., Splunk, QRadar, Sentinel).
  
• Investigate and respond to security incidents, breaches, and anomalies.
  
• Perform root-cause analysis and provide remediation recommendations.
  

2. Vulnerability Management

• Conduct vulnerability scans using tools like Nessus, Qualys, or OpenVAS.
  
• Analyze results and work with IT teams to patch or mitigate risks.
  
• Track and report remediation progress.
  

3. Security Architecture & Hardening

• Implement and maintain security controls across servers, endpoints, networks, and cloud environments.
  
• Harden operating systems, firewalls, databases, and applications.
  
• Enforce secure configuration and compliance standards (CIS, NIST, ISO 27001).
  

4. Network & Application Security

• Manage firewalls, IDS/IPS, proxies, VPN, and network access control solutions.
  
• Support secure application development (DevSecOps, SAST, DAST).
  
• Conduct penetration testing or coordinate with external vendors.
  

5. Cloud Security

• Implement cloud security best practices in AWS, Azure, or GCP.
  
• Manage cloud security monitoring, IAM policies, encryption, and compliance controls.
  
• Support secure deployment in cloud-native environments.
  

6. Governance, Risk & Compliance

• Assist with internal and external audits (ISO 27001, SOC 2, GDPR).
  
• Create and update security policies, SOPs, and risk assessments.
  
• Ensure adherence to regulatory requirements and industry standards.
  

7. Security Awareness & Reporting

• Conduct employee security awareness training.
  
• Document incidents, vulnerabilities, and risk findings.
  
• Provide regular reports to leadership and stakeholders.
  

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field.
  
• Hands-on experience in cybersecurity operations, tools, and technologies.
  
• Knowledge of networking, firewalls, IDS/IPS, encryption, and authentication.
  
• Familiarity with SIEM platforms (Splunk, QRadar, Sentinel, etc.).
  
• Strong understanding of security frameworks (NIST, CIS, ISO 27001).
  
• Experience with Linux/Windows system administration and basic scripting.
  

Preferred Qualifications

• Certifications:

  CEH, CompTIA Security+, CISSP, CISA, OSCP, CISM, CCSP

  .
• Experience with cloud security tools (AWS GuardDuty, Azure Defender, GCP Security Command Center).
  
• Knowledge of DevSecOps, CI/CD security, and container security tools.
  
• Experience with vulnerability scanners (Nessus, Qualys) and EDR tools (CrowdStrike, Carbon Black).
  
• Understanding of forensic analysis and malware investigation.
  

Soft Skills

• Strong analytical and problem-solving skills.
  
• Excellent communication and documentation abilities.
  
• Ability to work under pressure during incidents.
  
• Team-oriented with a proactive and security-first mindset.