Senior Infrastructure Security Engineer

Key Responsibilities:

• Design and implement robust infrastructure security architecture across on-prem and cloud environments (AWS, Azure, GCP).
  
• Conduct regular vulnerability assessments and penetration testing; prioritize and remediate security risks.
  
• Develop, maintain, and enforce security hardening guidelines for servers, networks, and endpoints.
  
• Monitor infrastructure for potential security threats using SIEM, IDS/IPS, and endpoint protection tools.
  
• Collaborate with DevOps and Cloud teams to integrate security into CI/CD pipelines and Infrastructure as Code (IaC).
  
• Investigate security incidents and lead incident response efforts, including root cause analysis and containment.
  
• Define and implement network segmentation, access control policies, and firewall configurations.
  
• Ensure compliance with regulatory frameworks such as ISO 27001, NIST, PCI-DSS, GDPR, etc.
  
• Automate security tasks and reporting wherever possible.
  
• Provide mentorship to junior engineers and participate in security awareness initiatives across the organization.
  

Required Skills & Qualifications:

• Bachelors degree in Computer Science, Information Security, or a related field (or equivalent experience).
  
• 5+ years of hands-on experience in infrastructure or cyber security roles.
  
• Strong knowledge of network protocols, firewalls, IDS/IPS, VPNs, proxies, and load balancers.
  
• Proven experience securing Linux, Windows, and containerized environments (Docker/Kubernetes).
  
• Expertise with security tools such as Splunk, Wireshark, Nessus, CrowdStrike, and Palo Alto firewalls.
  
• Deep understanding of cloud security principles (AWS, Azure, or GCP).
  
• Proficiency with IaC and configuration management tools like Terraform, Ansible, or CloudFormation.
  
• Familiarity with frameworks such as NIST, MITRE ATT&CK, CIS Benchmarks.
  
• Excellent problem-solving, analytical, and communication skills.