Information Security Engineer

About the role

The organization is looking for a skilled and motivated Information Security Engineer to protect its IT infrastructure, applications, networks and sensitive data from security threats. The role covers identifying vulnerabilities, implementing security controls, monitoring threats and ensuring compliance with information security policies.

Key responsibilities

• Implement, maintain and improve security controls across systems, networks, applications and infrastructure.
• Identify vulnerabilities through assessments, security reviews and authorized penetration testing.
• Monitor alerts, investigate suspicious activity and support incident response.
• Configure and maintain firewalls, endpoint protection, antivirus and intrusion detection/prevention systems.
• Assess applications, APIs, servers and network infrastructure; support access control, IAM and MFA.
• Help with secure configurations, patch management and vulnerability remediation.
• Support security policies, procedures, documentation, risk assessments, audits and compliance.
• Work with developers, system administrators and IT teams, promote security awareness and stay up to date on threats.

Required profile

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Technology or a related field, or equivalent practical experience.
• 1-3 years of relevant experience in information security, cybersecurity or IT security.
• Strong analytical, troubleshooting and problem-solving skills, good communication and teamwork.

Required skills

• Networking basics: TCP/IP, DNS, VPNs, firewalls.
• Windows and Linux security.
• Vulnerability tools such as Nessus, Nmap, Burp Suite or OWASP ZAP.
• OWASP Top 10, phishing, malware, authentication, authorization, encryption and access control.
• Incident handling, log analysis and vulnerability remediation.
• Preferred: CompTIA Security+, CEH or ISO/IEC 27001 Foundation; SIEM tools (Sentinel, Splunk, QRadar); cloud security (AWS, Azure, GCP); ISO 27001, NIST, CIS Controls; Python, PowerShell or Bash scripting.

What we offer

• Competitive salary based on skills and experience.
• Professional development and technical certifications.
• Exposure to modern security tools and a collaborative environment.