Cybersecurity Engineer
Software Development
Hybrid
Full-Time
We are looking for a Cybersecurity Engineer, who will design, implement, and maintain technical security controls across infrastructure and applications. The role involves hands-on configuration, security automation, and collaboration with DevOps and development teams to ensure secure system and software design.
What You Will Do
- Design, implement, and maintain network and endpoint security solutions (firewalls, IDS/IPS, EDR, SIEM).
- Conduct vulnerability assessments, penetration tests, and system hardening for servers and cloud environments.
- Manage and support existing security platforms, ensuring alignment with company policies.
- Participate in the full incident response lifecycle-detection, containment, investigation, and recovery.
- Perform forensic and root cause analyses; drive improvements through automation and analytics.
- Implement and manage cloud security controls and infrastructure-as-code (Terraform, CloudFormation).
- Embed security practices into CI/CD pipelines and containerized environments (Docker, Kubernetes).
- Conduct application and API security testing (SAST, DAST) and collaborate with developers to remediate issues.
- Participate in secure design reviews and threat modeling for new products.
What We're Looking For
- Proven experience with network and system security tools (firewalls, IDS/IPS, EDR, SIEM).
- Solid understanding of security frameworks (ISO 27001, CIS Benchmarks) and best practices.
- Experience in cloud security (AWS, Azure, or GCP) and DevSecOps environments.
- Proficiency in scripting languages such as Python, Bash, or PowerShell.
- Familiarity with secure SDLC, AppSec tools (SAST, DAST), and CI/CD pipeline security.
- Hands-on experience in vulnerability management, incident response, and forensic analysis.
- Strong analytical, communication, and collaboration skills.
- Relevant certifications (Security+, CEH, or CySA+) are a plus.
