System Security Engineer

Industry: IT Services & Consulting

Overview:

Key Responsibilities:

• Design, implement, and monitor security controls on Linux systems, conducting vulnerability assessments to detect potential risks and ensure compliance.
• Prepare for and support internal and external compliance audits by collecting necessary documentation, generating reports on system configurations, and responding to audit inquiries.
• Develop and maintain security policies and procedures tailored to Linux environments, aligned with compliance frameworks such as CIS Benchmarks, NIST, and PCI DSS.
• Use configuration management tools like Ansible to automate security hardening and configuration tasks, reducing human error.
• Keep comprehensive and up-to-date documentation covering Linux systems, security measures, and compliance processes.

Required Skills and Experience:

• Strong proficiency in Linux administration across multiple distributions with command-line expertise.
• Experience with scripting languages such as Bash and/or Python to automate security and system administration tasks.
• Familiarity with DevOps tools including Git, Ansible, and basic Jenkins knowledge.
• Working knowledge of at least one major cloud platform (AWS, Azure, or GCP).
• Solid understanding of networking protocols (TCP/IP, DNS, DHCP, HTTP) and firewall management.
• Awareness of security principles, best practices, and frameworks such as SELinux or Armor tools.
• Strong analytical and problem-solving abilities to diagnose issues and implement effective solutions.
• Clear and effective communication skills, both written and verbal, for collaboration and documentation.
• High attention to detail in following procedures, reviewing configurations, and maintaining documentation.

Educational Qualifications:

• Bachelors degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

Preferred Qualifications:

• Relevant certifications like RHCSA, RHCE.
• Experience with virtualization and containerization technologies such as Docker and Kubernetes.
• Deeper familiarity with cloud platforms like AWS, Azure, or GCP.

Key Skills:

• Linux Administration, Security Compliance, Vulnerability Assessment, Scripting (Bash/Python), DevOps Tools (Git, Ansible, Jenkins), Cloud Platforms (AWS/Azure/GCP), Networking Fundamentals, Security Frameworks (SELinux), Configuration Management, Documentation, Audit Support.