Security Engineer

Job Description

Are you ready to be the cybersecurity cornerstone of a fast-moving tech environment Were looking for a sharp strategic IT Security Engineer to lead our company-wide security effortsfrom infrastructure hardening and penetration testing to audit readiness and compliance documentation. Youll own the roadmap for SOC2 and HiTrust collaborate across DevOps and RAQA and implement proactive measures that protect our systems data and reputation. If you thrive on precision automation and staying five steps ahead of threats this is your chance to make a measurable impact.

Responsibilities :

Cybersecurity Management 40%

• Drive development standards and processes related to cybersecurity compliance.
• Monitor all cybersecurity processes operations and infrastructure monitoring internal and external policy and regulatory compliance.
• Review and evaluate development designs (for existing products and during design phase for new products) to identify gaps in cybersecurity controls and drive updates to any cybersecurity or compliance documentation.
• Liaise with internal and external stakeholders to prepare for SOC2 Type 2 and HiTrust).
• Drive cybersecurity audit strategy and readiness from a dev security and devops perspective.
• Identify implement and maintain all security tools and technology.
• Schedule (and ideally automate) internal vulnerability scans remediating findings and ensuring accurate & timely reporting to satisfy PCI DSS requirements.
• Schedule annual Penetration Tests with external supplier(s) and ensure implementation of items identified in remediation plans.
• Complete required cybersecurity applications and records for large customers and audits including reporting as required.

Infrastructure Management 30%

Risk Management and Compliance 20%

QMS and Documentation 10%

Role Requirements

Minimum education (essential) :

Minimum education (desirable) :

Minimum applicable experience (years) :

Required nature of experience :

AWS ecosystem :

The following would be advantageous :

Skills and Knowledge (essential) :

Key Skills

Splunk,IDS,Network security,Computer Networking,Identity & Access Management,PKI,PCI,NIST Standards,Security System Experience,Information Security,Encryption,Siem

Employment Type : Full-Time

Experience : years

Vacancy : 1