Information Security Engineer

Job Summary:

Information Security Engineer

Key Responsibilities:

• Design, deploy, and manage

  security solutions

  including firewalls, IDS/IPS, SIEM, endpoint protection, and DLP systems.
• Conduct

  vulnerability assessments, penetration testing, and risk analysis

  to identify and mitigate potential threats.
• Monitor networks and systems for

  security breaches and suspicious activities

  .
• Implement and maintain

  identity and access management (IAM)

  controls and multi-factor authentication (MFA).
• Ensure compliance with

  security frameworks and standards

  (ISO 27001, NIST, GDPR, PCI DSS, etc.).
• Collaborate with IT, DevOps, and cloud teams to integrate

  security best practices

  into infrastructure and applications.
• Develop and maintain

  incident response plans

  and assist in investigations and root cause analysis.
• Automate security processes using

  scripts or security orchestration tools (SOAR)

  .
• Manage and document

  security policies, procedures, and technical configurations

  .
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.
  

Required Qualifications and Skills:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
  
• 0–3years of experience as a

  Security Engineer, SOC Analyst, or IT Security Specialist

  .
• Strong knowledge of:
  

• Network security concepts

  (firewalls, VPN, IDS/IPS, proxy, WAF)

• Operating systems security

  (Windows, Linux, macOS)

• Cloud security

  (AWS, Azure, or GCP)

• SIEM tools

  (Splunk, QRadar, Sentinel, ELK, etc.)

• Vulnerability management tools

  (Nessus, Qualys, Rapid7)
• Understanding of

  encryption, authentication, PKI, and secure protocols

  .
• Familiarity with

  incident response and digital forensics

  .
• Excellent problem-solving, analytical, and communication skills.
  

Preferred Skills (Nice to Have):

• Experience with

  DevSecOps

  ,

  container security

  (Docker/Kubernetes), or

  cloud-native security

  .
• Knowledge of

  zero-trust architecture

  and

  threat intelligence platforms

  .
• Experience in

  automation/scripting

  (Python, PowerShell, Bash).
• Familiarity with

  data loss prevention (DLP)

  ,

  email security

  , and

  endpoint detection (EDR/XDR)