Security Engineer

Security Tools and Systems Management

Administer and maintain existing security tools, including endpoint protection, SIEM, DLP, vulnerability scanners, and identity management systems.

Monitor tool performance and ensure proper integration and configuration across environments.

Troubleshoot, fine-tune, and update systems to maintain optimal effectiveness and reliability.

Ensure timely application of security patches and updates.

Project Implementation

Assist in planning, executing, and delivering new security projects from initiation to completion.

Collaborate with IT and infrastructure teams to deploy security solutions according to organizational requirements.

Document configurations, procedures, and lessons learned for all implemented projects.

Track progress and provide status updates to the Information Security Manager.

Proof of Concept (POC) and Evaluation

Conduct POCs to evaluate new security products, tools, or technologies.

Define testing parameters, evaluate technical feasibility, and assess effectiveness based on performance metrics.

Prepare technical evaluation reports and present findings and recommendations to management.

Reporting and Analysis

Collect and analyze data from multiple security systems to identify trends, inefficiencies, and improvement opportunities.

Prepare regular reports summarizing tool performance, project status, and security findings.

Assist in incident analysis, post-project reviews, and improvement planning.

Collaboration and Support

Work closely with the IT, Infrastructure, and Compliance teams to maintain a secure environment.

Provide support during audits and assessments by ensuring security controls are in place and functioning.

Participate in incident response efforts when needed.

Skills

Required Qualifications

Bachelor's degree in Information Security, Computer Science, Information Technology, or related field (or equivalent experience).

2-4 years of experience as a Security Engineer or in a similar technical security role.

Hands-on experience with security technologies such as:

SIEM and log management tools

Endpoint detection and response (EDR)

Vulnerability management systems

DLP, firewalls, and IAM tools

Experience conducting POCs, preparing evaluation reports, and presenting findings.

Strong understanding of network security, system hardening, and incident handling fundamentals.

Basic scripting or automation experience (Python, Bash, or PowerShell) is an advantage.

Preferred Qualifications

Certifications such as CompTIA Security+, CEH, GSEC or entry level ISC2 certs like : Certified in Cybersecurity (CC), Systems Security Certified Practitioner (SSCP) etc.

Experience working with cloud or hybrid environments.

Familiarity with ISO 27001, NIST, or other recognized security frameworks.

Soft Skills

Excellent attention to detail and analytical thinking.

Strong communication and documentation abilities.

Reliable, proactive, and able to manage multiple priorities.

Works well both independently and in a team environment.