Senior Security Engineer

Responsiblitities:

• Develop, implement, and manage robust security policies and procedures to protect the organizations information assets.
• Conduct risk assessments, vulnerability assessments, and security audits to identify and mitigate potential threats.
• Manage and oversee the companys vulnerability management program, including the identification, classification, and remediation of security vulnerabilities.
• Design and enforce security measures and policies for cloud computing environments, with a strong focus on AWS.
• Stay updated on the latest cybersecurity trends, threats, and technologies to continuously improve the organizations security posture.
• Collaborate with development and operations teams to integrate security best practices into software development and deployment processes.
• Ensure compliance with ISO standards and other relevant regulations.
• Provide guidance and mentorship to junior security staff and other team members.

skills/expertise:

• Bachelors degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Minimum of 8 years of experience in information security, with a demonstrated focus on cybersecurity and vulnerability management.
• In-depth knowledge of ISO 27001/27002 and other relevant security frameworks and standards.
• Advanced understanding of application security principles and best practices, with solid experience in implementing security measures.
• Extensive experience with cloud computing platforms, particularly AWS.
• Proven experience in developing and implementing security policies and procedures.
• Knowledge and experience with development and implementation of security controls for implementing AI security policies.
• Experience as a participating member of a security operations organization with responsibility for monitoring, alerting and incident response.
• Strong analytical and problem-solving skills with the ability to identify and address complex security issues.
• Excellent communication skills, with the ability to clearly articulate security concepts to technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.