Cyber Security Lead

Job Summary:

The Cybersecurity Engineer is responsible for safeguarding the organizations information systems, networks, and data against cyber threats. This role involves implementing and managing security solutions, monitoring for vulnerabilities, responding to incidents, and ensuring compliance with cybersecurity standards and regulations.

Key Responsibilities:

• Design, implement, and manage security tools, systems, and processes (firewalls, IDS/IPS, SIEM, antivirus, etc.).
  
• Conduct vulnerability assessments, penetration testing, and security audits.
  
• Monitor networks and systems for potential threats or suspicious activity.
  
• Respond to and investigate security incidents, breaches, and anomalies.
  
• Develop and enforce security policies, standards, and procedures.
  
• Manage identity and access controls (IAM) across systems and applications.
  
• Collaborate with IT and DevOps teams to integrate security into all stages of system development (DevSecOps).
  
• Maintain up-to-date knowledge of emerging threats, vulnerabilities, and mitigation techniques.
  
• Train and raise awareness among staff on security best practices and phishing prevention.
  
• Ensure compliance with regulations such as GDPR, ISO 27001, NIST, and HIPAA (as applicable).
  
• Support disaster recovery and business continuity planning.
  

Required Qualifications and Skills:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
  
• 2–5 years of experience in cybersecurity, information security, or related IT roles.
  
• Strong understanding of

  network security

  ,

  operating systems (Windows/Linux)

  , and

  cloud security

  .
• Experience with security technologies such as:
  
• Firewalls, VPNs, and endpoint protection
  
• SIEM tools (Splunk, QRadar, ELK, Sentinel)
  
• IDS/IPS systems
  
• Vulnerability scanners (Nessus, Qualys)
  
• Knowledge of

  cyber threat intelligence

  ,

  incident response

  , and

  forensics

  .
• Understanding of

  encryption

  ,

  PKI

  ,

  identity management

  , and

  access control

  .
• Familiarity with frameworks such as

  NIST

  ,

  CIS Controls

  , and

  ISO 27001

  .
• Strong analytical, problem-solving, and communication skills.
  

Preferred Skills (Nice to Have):

• Experience with

  cloud security (AWS, Azure, GCP)

  .
• Hands-on knowledge of

  DevSecOps tools

  and

  secure coding practices

  .
• Exposure to

  SOC (Security Operations Center)

  environments.
• Knowledge of

  compliance standards

  (PCI DSS, HIPAA, GDPR).
• Experience with

  automation and scripting

  (Python, PowerShell, Bash).