Qualifications: - More than 4 years of experience.
- Proficient understanding of security, monitoring, and networking technologies, including tools, communication protocols, and industry standards used to safeguard and manage enterprise IT infrastructures.
- Possesses intermediate to advanced-level expertise in security operations, networking, or related domains, with hands-on experience supporting or managing security technologies in a professional environment.
- Demonstrated knowledge and/or practical experience in key areas of cybersecurity such as network security, firewall configuration and management, and web security—including the use of web application firewalls (WAFs) and proxy technologies.
- Experienced in conducting thorough investigations of security incidents, effectively documenting findings, and producing detailed reports on information security (InfoSec) issues, including identification of threats and analysis of emerging cybersecurity trends.
- Familiar with globally recognized IT security and compliance frameworks and regulations, such as ISO/IEC 27001, HIPAA, and SOX, with an understanding of how these standards apply to enterprise security policies and practices.
Job Responsibilities: - Monitor and analyze network traffic, system logs, and alerts to detect and respond to security threats and anomalies in real-time.
- Manage and maintain security tools and systems, such as firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM), and endpoint protection solutions.
- Investigate security incidents, conduct root cause analysis, document findings, and recommend remediation strategies to minimize future risks.
- Implement and enforce cybersecurity policies, standards, and best practices in accordance with industry frameworks such as ISO 27001, HIPAA, and SOX.
- Coordinate vulnerability assessments and penetration testing activities, and follow up on the mitigation of identified risks.
- Collaborate with cross-functional teams (networking, infrastructure, compliance, and application teams) to enhance security posture and incident response readiness.
- Perform regular audits of systems and applications to ensure compliance with internal and external security requirements.
- Stay updated on emerging threats, vulnerabilities, and security technologies, and provide recommendations to improve the organization’s cybersecurity defense.
- Support firewall and proxy management, including configuration, policy updates, and access control reviews.
- Create and maintain documentation related to security architecture, incident handling procedures, and investigation reports.
|
