Design, implement, configure, maintain, and support the end-to-end Security Framework including IPS/IDS, endpoint protection, email and URL filtering, SIEM, vulnerability assessment/scanning, ATP solutions, DLP solutions, MFA and SSO solutions, cloud security, WAFs, and more.
Lead Security Operations – configure alerts to protect against cyber threats, review configurations, and tune systems as needed.
Respond to and investigate potential or actual security incidents.
Lead all phases of Incident Response (Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned).
Handle escalated security alerts and approve mitigation plans.
Research, evaluate, design, configure, and maintain security solutions.
Develop and manage the Vulnerability Management Program, review scan results, and approve mitigation plans.
Perform penetration testing and coordinate third-party testing; review results and remediation plans.
Conduct risk assessments, document threats and vulnerabilities, and develop mitigation strategies.
Evaluate current systems and recommend improvements.
Perform health checks and best practice reviews for security solutions.
Conduct threat modeling/hunting using industry frameworks.

Bachelor’s degree in Computer Science, Engineering, or related field preferred
Industry certifications such as CEH, CISSP, CCSK, CCSP, CISM, OSCP, PenTest+ are desirable
7–10 years of hands-on experience in Cybersecurity required
Strong knowledge of security frameworks, IT infrastructure, cloud services, and regulatory requirements
Ability to work after hours, nights, weekends, and holidays as needed for incident response.

Senior Information Security Engineer

Key skills