cybersecurity engineer

Key Responsibilities

• Design, implement, and maintain security solutions to protect networks, systems, and applications.
  
  
• Perform threat analysis, vulnerability management, and penetration testing to identify and mitigate security risks.
  
  
• Monitor and respond to security incidents using SIEM and SOC tools.
  
  
• Develop and enforce security policies, standards, and best practices across the organization.
  
  
• Support secure infrastructure and application design in collaboration with IT, DevOps, and software engineering teams.
  
  
• Automate security monitoring, incident response, and reporting tasks.
  
  
• Implement and manage firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and identity management solutions.
  
  
• Ensure compliance with regulations and frameworks (ISO 27001, NIST, GDPR, PCI-DSS, HIPAA).
  
  
• Conduct security awareness training and contribute to building a security-first culture.
  
  

Required Technical Skills (Tough Skills)

• Network & Infrastructure Security: Strong expertise in firewalls, IDS/IPS, VPNs, WAF, load balancers, and network segmentation.
  
  
• Security Tools: Experience with SIEM (Splunk, QRadar, ELK), EDR/XDR (CrowdStrike, SentinelOne, Carbon Black), vulnerability scanners (Nessus, Qualys, OpenVAS).
  
  
• Cloud Security: Hands-on knowledge of securing workloads in AWS, Azure, GCP, including IAM, encryption, CSPM, and security groups.
  
  
• Application Security: Understanding of OWASP Top 10, SAST/DAST tools (Checkmarx, Veracode, Burp Suite) and secure SDLC.
  
  
• Identity & Access Management (IAM): Experience with SSO, MFA, PAM, Active Directory, Okta, Azure AD.
  
  
• Incident Response & Forensics: Knowledge of malware analysis, packet analysis (Wireshark, tcpdump), digital forensics tools.
  
  
• Scripting & Automation: Proficiency in Python, Bash, PowerShell for automating security tasks.
  
  
• Cryptography & Data Protection: Knowledge of TLS/SSL, PKI, key management, tokenization, and encryption protocols.
  
  
• Operating Systems: Strong security administration skills in Linux and Windows environments.
  
  
• DevSecOps: Familiarity with Docker, Kubernetes security, CI/CD pipeline hardening.
  
  

Good to Have

• Certifications: CEH, OSCP, CISSP, CCSP, CompTIA Security+, GCIH, GIAC.
  
  
• Experience with Zero Trust Architecture.
  
  
• Knowledge of threat intelligence platforms and SOAR tools.