Security Engineer

Job Purpose

The Security Engineer is responsible for designing, implementing, and maintaining security controls across the company's systems, infrastructure, and applications to ensure data, network, and endpoint security are protected against internal and external threats. This role is hands on and execution driven, focusing on building secure systems, monitoring security risks, and responding to incidents, while continuously improving the organization's security posture.

Key Responsibilities

Security Infrastructure & Architecture

• Design and implement security controls across cloud and on-prem environments.
• Define and enforce security architecture best practices (network, system, application).
• Ensure secure configuration of servers, databases, and cloud services.
• Support secure SDLC practices in collaboration with engineering teams.

Threat Detection & Monitoring

• Implement and manage security monitoring tools (SIEM, IDS/IPS, etc.).
• Monitor systems for suspicious activity, vulnerabilities, and anomalies.
• Develop alerts, dashboards, and detection rules for early threat identification.
• Continuously improve visibility across infrastructure and applications.

Incident Response

• Lead or support investigation and response to security incidents.
• Perform root cause analysis and define remediation actions.
• Coordinate with relevant teams during security breaches or alerts.
• Document incidents and ensure preventive measures are implemented.

Vulnerability Management

• Conduct regular vulnerability assessments and penetration testing support.
• Identify security gaps in systems, applications, and infrastructure.
• Prioritize and track remediation of vulnerabilities.
• Ensure timely patching and configuration updates.

Access Control & Data Security

• Manage identity and access management (IAM) policies and controls.
• Ensure proper authentication, authorization, and least-privilege principles.
• Support data protection practices including encryption and secure storage.
• Work with Data and Engineering teams to ensure compliance with security standards.

Security Awareness & Collaboration

• Work closely with Engineering, DevOps, and Data teams to embed security practices.
• Provide guidance on secure development and deployment practices.
• Support internal security awareness initiatives.
• Act as a security advisor for technical teams.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related fields.
• 2+ years of experience in cybersecurity or security engineering roles.
• Experience with cloud security (AWS, GCP, or Azure) preferred.
• Strong understanding of network security, application security, and system security.