Cyber Security Engineer
- Posted 2 months ago
- Be among the first 10 applicants
Job Description
Job Description:
Responsible for the following roles & responsibilities (but not limited to the following), covering primarily all N2 and N3 computers and systems in the company:
- Perform Log Review on classified computers and systems.
- Perform Change Management and maintain records for audit purposes.
- Conduct Cyber Risk Assessment on classified computers & systems.
- Handle and follow up on Cyber Security Incident Management.
- Conduct Cyber hygiene awareness & education for computer users.
- Conduct internal and support external Cyber Security Compliance Audits
- Ensuring adherence to internal security policies, IT governance frameworks, and compliance controls.
- Track and remediate vulnerabilities, ensuring computers and system meet security patching and compliance standards.
- Conduct Vulnerability Management (VA Scanning) on classified network computers and systems.
- Enforce Data Security and Encryption requirements on classified computers and systems.
- Formalize and archival of network security processes & flows, develop SOPs for compliance.
- Implement GPOs to maintain Secured Configurations to prevent breaches
- Daily basic cyber security operation and maintenance.
- Conduct security audits and prepared reports, highlighting areas for improvement.
- Coordinate and supporting external audits, risk assessments, and regulatory submissions.
- Assist with implementation of security standards aligned to MSD, GISO, IT and other relevant authorities frameworks.
Job Requirements to have 1 or more of the following certifications:
- CSSA+ — Cyber Security System Administration (cum CEH / ComTia Security+ within 6 months of appointment)
- CISA — Certified Information Systems Auditor
- CISM — Certified Information Security Manager
- ISO 27001 – Internal Audit — ISO/IEC 27001 Information Security Management Systems (ISMS) Internal Auditor.
- ISO 27001 – Lead Implementer — ISO/IEC 27001 Information Security Management Systems (ISMS) Lead Implementer.
- CISSP — Certified Information Systems Security Professional.
- GCIH - GIAC Certified Incident Handler
More Info
Key Skills
Network security processes
Cyber security operation and maintenance
Cyber Security Compliance Audits
Cyber Risk Assessment
Cyber hygiene awareness education
Cyber Security Incident Management
Internal security policies
Compliance controls
IT governance frameworks
Log Review
VA Scanning
Risk assessments
About Company
Skills:
Vulnerability Management, Threat Hunting, Security Controls, Patch Management, cybersecurity technology upgrades, cybersecurity risk assessments, ICS OT operations, CII system and network backup processes, cybersecurity solutions, cybersecurity awareness programs, control system operations, cybersecurity tools, cybersecurity audits, Tabletop Exercises, Security Reviews and Assessments, Purple Team Exercises, OT system and network monitoring
Skills:
Threat Hunting, Security Controls, Patch Management, Network Monitoring, Vulnerability Management, control system operations, cybersecurity technology upgrades, cybersecurity risk assessments, ICS OT operations, cybersecurity solutions, cybersecurity awareness programs, cybersecurity tools, cybersecurity audits, Tabletop Exercises, Security Reviews and Assessments, Purple Team Exercises, CII system and network backup
Skills:
Firewalls, Network Security, Vpns, Technical Documentation, Routing, Vulnerability Management, Switching, Engineering, Segmentation, security infrastructure, Architecture, Project Coordination, Vendor Management
Skills:
Ids, Ips, Unix, Dlp, Aws Cloud, Windows, PowerShell, Linux, Python, Proxy, Iam, Vulnerability Management, EPP, IGA, NGFW, PAM solutions, Firewall rule review, Email defenses, Dam
Skills:
secure admin access), Network security concepts (IPS, Incident Response, Patch Management, Ha, Firmware upgrades, DDoS mitigation, Change management and documentation, Security compliance assessments and audits, Firewall operations maintenance, app-layer inspection