Information Security Engineer

Profile description

We are seeking an Information Security Professional to join our team. The successful candidate will be responsible for monitoring, detecting, and analyzing security incidents, as well as performing risk assessments, implementing security measures, and ensuring compliance with ISO 27001/ ISO 22301 standards.

KEY SKILLS AND CAPABILITIES

• Monitor and analyze security events and incidents using Security Information and Event Management (SIEM) tools.
• Enhance and build cyber threat detection use cases, tuning for accuracy and reducing false positives.
• Investigate and respond to security incidents, performing root cause analysis and recommending preventive measures.
• Monitor 3rd-party/vendor risk alerts and provide remediation recommendations.
• Support vulnerability and patch management programs, tracking remediation progress and effectiveness.
• Work with IT/OT teams to implement security solutions and controls, ensuring alignment with best practices.
• Stay updated on the latest cyber threats, vulnerabilities, and attack techniques to improve defence capabilities.
• Provide timely reports and updates to management on incidents, detection trends, and security posture.
• Act as a local point of contact for all operational security escalations.

PROFESSIONAL EXPERIENCE AND EDUCATION

• Bachelors degree in Computer Science, Information Technology, or related field.
• 1-3 years of experience in security operations, incident monitoring/response, and SIEM platforms.
• Knowledge of frameworks such as MITRE ATT&CK, NIST CSF, and CIS controls.
• Hands-on experience with vulnerability assessment tools, EDR/XDR, firewalls, and penetration testing.
• Analytical skills with strong attention to detail in identifying patterns, anomalies, and threats.
• Effective communication and collaboration skills for cross-team incident handling.
• Industry certifications (Security+, CEH, SOC Analyst, etc.) are desirable but not mandatory.