Information Security Engineer

It also collaborates with internal teams and external partners to maintain audit readiness, assess, and mitigate third-party security risks, and support business continuity and disaster recovery objectives.

KEY RESPONSIBILITIES:

• Support the establishment and execution of the incident response process, including detection, containment, eradication, and recovery activities.
• Investigate security breaches, document findings, and prepare detailed post-incident reports with recommendations for improvement.
• Contribute to continuous improvement of incident response playbooks and readiness exercises.

• Implement, configure, and monitor security tools such as firewalls, IDS/IPS, and SIEM platforms to detect and prevent threats.
• Ensure timely patching and updates of operating systems, applications, and infrastructure to reduce vulnerabilities and prevent exploitation.
• Manage identity and access controls, including privileged account management, to enforce least-privilege principles and safeguard critical systems.
• Collaborate with ITSC and DevOps teams to embed security into daily operations and system design.

• Provide security input and technical guidance in IT projects and system changes to ensure secure design and implementation.
• Conduct security impact assessments for new technologies, applications, and processes, identifying risks and recommending mitigation strategies.
• Collaborate with project managers, developers, and infrastructure teams to integrate security requirements into project lifecycles.
• Document findings and contribute to continuous improvement of secure change management practices.

QUALIFICATIONS:

• A graduate of BS Degree in IT or any related courses.
• With 3 to 5 years of IT Security experience.
• Understanding of ISO9001, ISO27001 and DPA
• Hands on with SIEM/SOAR, EDR/XDR, vulnerability scanning, patch compliance.
• Hands on implementation with MFA, conditional access, privileged access vaulting, and least-privilege principles.
• Hands on configuration with DLP policies, encryption standards, secure backup/restore, and endpoint protection.
• Ability to collaborate with ITSC and DevOps teams to embed security into daily operations and system design.