About Job
Job Summary:
We are seeking a highly skilled Information Security
Professional to protect our organization's digital assets, networks, and
data from cyber threats. The ideal candidate will be responsible for
implementing security measures, monitoring for potential security breaches,
conducting risk assessments, and ensuring compliance with industry regulations.
Key Responsibilities:
Security Monitoring & Incident Response:
1.
Monitor security logs and alerts for potential
threats.
2.
Investigate and respond to security incidents in
real-time.
3.
Develop and implement incident response plans
(IRP).
Risk Assessment & Compliance:
1.
Conduct risk assessments and vulnerability
scans.
2.
Ensure compliance with ISO 27001, NIST, GDPR,
SOC2, HIPAA (as applicable).
3.
Develop and enforce security policies,
procedures, and standards.
Network & System Security:
1.
Implement firewalls, IDS/IPS, SIEM, endpoint
security solutions.
2.
Perform regular penetration testing and
vulnerability assessments.
3.
Secure cloud environments (AWS, Azure, GCP) and
on-premise networks.
Identity & Access Management (IAM):
1.
Manage role-based access controls (RBAC)
and multi-factor authentication (MFA).
2.
Ensure least privilege access across systems and
applications.
Security Awareness & Training:
1.
Conduct security awareness training for
employees.
2.
Promote best practices for phishing, social
engineering, and password management.
Security Architecture & DevSecOps:
1.
Work with development teams to integrate security
into CI/CD pipelines.
2.
Implement secure coding practices and code
reviews.
3.
Design and deploy security solutions for cloud
and hybrid environments.
Required Skills & Qualifications:
Bachelor’s/Master’s Degree in Cybersecurity, Computer
Science, or related field.
Certifications (Preferred): CISSP, CISM, CEH, CompTIA
Security+, OSCP.
Hands-on experience with SIEM tools (Splunk, ELK,
QRadar), EDR, IDS/IPS, WAF.
Strong understanding of encryption, PKI, VPNs, and
endpoint security.
Experience with AWS, Azure, or GCP security best
practices.
Familiarity with security frameworks like NIST, ISO
27001, MITRE ATT&CK.
Strong analytical and problem-solving skills.
Preferred Experience:
Incident response and digital forensics experience.
Threat intelligence and ethical hacking knowledge.
Experience in SOC (Security Operations Center)
environments.
Work Environment & Benefits:
Competitive salary with performance bonuses.
Opportunity to work in a fast-paced, security-focused
team.
Professional development and certification reimbursement.
Flexible work options (Remote/Hybrid).
Required Skills/Experience
1. Technical Security Skills
Network Security – Firewalls, IDS/IPS, VPNs, WAF, NAC
Endpoint Security – EDR, XDR, antivirus, device
hardening
Cloud Security – AWS, Azure, GCP security controls,
IAM
SIEM & Log Management – Splunk, ELK Stack,
QRadar, ArcSight
Penetration Testing & Ethical Hacking – Kali
Linux, Metasploit, Burp Suite
Threat Intelligence & Malware Analysis – MITRE
ATT&CK, VirusTotal, YARA rules
Identity & Access Management (IAM) – MFA, SSO,
RBAC, Zero Trust
Cryptography & Encryption – TLS, SSL, PKI,
Hashing, AES, RSA
Secure Software Development (DevSecOps) – OWASP,
SAST, DAST, CI/CD security
Incident Response & Digital Forensics –
Wireshark, Volatility, Autopsy, Cyber Kill Chain
2. Compliance & Risk Management
Regulations & Standards: ISO 27001, NIST, GDPR,
HIPAA, SOC 2, PCI-DSS
Risk Assessment & Mitigation – Threat modeling,
risk scoring frameworks
Security Audits & Governance – Internal and
external security audits
Business Continuity & Disaster Recovery – DR
planning, BCP strategies
3. Soft Skills
Problem-Solving & Analytical Thinking – Critical
thinking for security incidents
Communication & Documentation – Writing security
reports, policies, and educating teams
Attention to Detail – Identifying anomalies in logs,
configurations, and network traffic
Team Collaboration – Working with IT, developers, and
leadership teams
Time Management & Prioritization – Handling
multiple security incidents and projects
4. Industry Certifications (Preferred)
Entry-Level: CompTIA Security+, SSCP, CEH
Intermediate: CISSP, CISM, CCSP, GIAC
Advanced: OSCP, CRTP, GPEN, GCIH
