Senior Cyber Security Engineer

Brief Summary

We are seeking a skilled Senior Cybersecurity Engineer to safeguard our organization's digital assets through effective security measures and proactive risk management. This role emphasizes leadership in incident response, vulnerability assessments, and the establishment of comprehensive security practices.

Responsibilities

• Lead the execution of security awareness training initiatives, including sessions, phishing simulations, and assessments to foster a culture of security compliance. Conduct thorough IT security risk assessments to identify vulnerabilities and drive remediation efforts across the organization. Oversee vulnerability assessments, penetration testing, and security audits, coordinating with internal teams and external vendors for effective tracking of findings. Develop and maintain security frameworks, policies, and guidelines in line with regulatory and governance requirements. Monitor security systems to detect unauthorized access and respond appropriately to threats. Direct incident response efforts, including investigation, root-cause analysis, and documentation for audit readiness. Research emerging security threats and propose effective mitigation strategies. Provide technical security advice to teams involved in infrastructure, applications, and business processes. Support governance and compliance assessments through meticulous maintenance of security documentation and risk metrics. Manage IT security audit processes, ensuring timely handling of documentation and addressing auditors queries.

Requirements

• A recognized degree in Cybersecurity, Computer Science, IT, or a related field. A minimum of 3 years of experience in an IT security role. Strong understanding of security frameworks (e.g. ISO/IEC 27001, NIST Cybersecurity Framework), risk management methodologies, and awareness of the top 10 OWASP vulnerabilities. Preferred certifications: CRISC, CISM, and/or CISSP. Comprehensive hands-on experience with cybersecurity technologies including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, and secure network protocols. Excellent collaboration skills, enabling effective teamwork across technical teams and stakeholders.