Job description

Seeking an experienced Information Security Engineer with 5+ years of hands-on experience in designing, implementing, and managing enterprise-level security solutions. The ideal candidate will ensure the confidentiality, integrity, and availability of information systems through effective risk assessment, threat mitigation, and compliance management. Must-Have: • Strong knowledge of network and endpoint security, firewalls, and intrusion detection/prevention systems (IDS/IPS) • Experience with vulnerability assessment, penetration testing, and remediation processes • Hands-on expertise with SIEM tools (Splunk, QRadar, or similar) • Proficiency in cloud security (AWS, Azure, or Google Cloud Platform) and identity/access management (IAM) • Knowledge of security frameworks and compliance standards (ISO 27001, NIST, SOC2, GDPR) • Experience with incident response, threat analysis, and forensics Responsibilities: • Implement, monitor, and improve security controls across infrastructure and applications • Conduct vulnerability assessments, analyze threats, and coordinate remediation efforts • Manage SIEM alerts, investigate security incidents, and perform root cause analysis • Collaborate with IT and DevOps teams to integrate security best practices in deployments • Maintain and document security policies, procedures, and audit reports

Requirements