A large Financial Services Institution is in need of an experienced Cyber Security Engineer to join their established Infrastructure security team.
The ideal candidate will demonstrate expertise in risk assessment, operational efficiency, and strategic thinking, balanced with a practical approach to align security with operational imperatives.
Key Responsibilities:
Threat Management:
Oversee security systems, analyze alerts, and conduct threat-hunting and root cause investigations to address potential risks effectively.
*
Vulnerability and Compliance Oversight:
Perform vulnerability scans, penetration tests, and audits to ensure adherence to compliance standards and reduce exposure to security risks.
*
Security Infrastructure Development:
Design, implement, and refine security solutions and architectures to strengthen the organization's defense mechanisms.
*
Organizational Security Awareness:
Create and deliver training programs to build a security-focused mindset across the organization.
*
Incident Management and Response:
Develop, test, and maintain plans for effectively addressing security incidents to minimize impact.
Technical Background:
* Endpoint Security: Skilled in using EPP, EDR, and XDR tools like Microsoft Defender and Cortex XDR.
* Network Security: Proficient in managing firewalls, IDS/IPS, VPNs, web proxies, and tools such as Palo Alto NGFW and Cisco IOS.
* Application Security: Experienced in integrating security into DevOps pipelines, including automated security testing, CI/CD security, SAST/DAST, and secure coding practices.
* Identity Management: Expertise in IAM tools and practices such as MFA, RBAC, and PAM, with hands-on experience using AAD, SSO, and Okta.
* Data Protection: Knowledgeable in data security measures like encryption, key management, and DLP strategies.
Industry Knowledge:
* Cybersecurity Frameworks: Competent in applying standards such as NIST, CIS Controls, and MITRE ATT&CK to design and implement secure systems.
* Automation Skills: Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automating security tasks and integrating tools.
* Knowledge: Strong grasp of fundamental networking and cybersecurity principles.
Send Profiles asap for this urget opportunity