Senior Cybersecurity Engineer

Key Responsibilities:

• Conducts risk assessments, vulnerability scans, pen-testing, and source code review, and provides recommendations for remediation.
• Collaborates with IT, DevOps, and software development teams to integrate security into the software development lifecycle.
• Reviews/monitors company IT systems, security alerts, and suspicious activities.
• Investigates security incidents.
• Maintaining the InfoSec Program documentation.
• Provides information security education.

Requirements and qualifications:

• Professional experience in web pen-testing, risk assessment, vulnerability, DAST, SAST scan, and security incident investigation.
• Web Application Security Certification is preferred.
• Experience with programming/scripting.
• Strong knowledge of networking protocols, operating systems (Windows, Linux), and their security configurations.
• Professional experience implementing and managing security systems including WAF, SIEM, and Vulnerability Management tools.
• Strong knowledge of security architecture and design.
• Good knowledge of databases and web server technologies.
• Familiarity with cloud computing technologies.
• Knowledge of ISO 27k standard.
• Excellent security document writing and reporting skills.
• Good communication skills.
• 5+ years of experience in cybersecurity, with at least 2 years in a senior role.
• Bachelor’s degree in Computer Engineering, Computer Science, Information Security, or a related field.