Designing, implementing, and maintaining robust security solutions
Conducting vulnerability assessments and penetration testing
Developing and enforcing security policies, standards, and procedures
Ensuring compliance with industry frameworks such as NIST, ISO 27001, HIPAA, and other regulatory requirements
Collaborating with IT, DevOps, and business teams to integrate security best practices
Monitoring security systems and responding to security incidents
Providing security awareness training and guidance to employees

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent professional experience)
3-5+ years of hands-on experience in information security engineering, cybersecurity operations, or related discipline
Professional certifications strongly preferred: CISSP, CISM, CEH, GIAC, CompTIA Security+, or equivalent
In-depth knowledge of security frameworks and standards (NIST, ISO 27001, PCI DSS, HIPAA, SOC 2, etc.)
Experience with security technologies: SIEM, firewalls, IDS/IPS, endpoint protection, DLP, vulnerability management, and cloud security platforms (AWS, Azure, GCP)
Proficiency in scripting or programming languages (Python, PowerShell, Bash, etc.) for automation and security tool integration
Strong understanding of network protocols, operating systems (Windows, Linux, macOS), and secure architecture principles
Demonstrated experience in incident response, forensics, and threat intelligence
Familiarity with regulatory compliance requirements and audit processes
Excellent analytical, problem-solving, and communication skills; ability to convey complex security concepts to technical and non-technical audiences
Commitment to continuous learning and staying current with emerging threats, technologies, and industry trends

Information Security Engineer

Key skills