The Information Security Engineer plays a key role in safeguarding the integrity, availability, and confidentiality of the organization’s information assets by analyzing security risks and supporting the implementation of appropriate security controls. This position applies professional judgment within established frameworks to assess vulnerabilities, identify potential threats, and recommend effective mitigation strategies. Working collaboratively with cross-functional IT teams, the role contributes to maintaining and strengthening the organization’s security posture through the consistent application of security policies, procedures, and industry best practices.
Additionally, the Information Security Engineer is responsible for monitoring security access, conducting internal and external security assessments, and supporting the investigation and resolution of security incidents. The role involves analyzing security events to identify root causes, recommending preventive actions, and contributing to continuous improvement initiatives. It also requires maintaining up-to-date knowledge of evolving threats, technologies, and compliance requirements, as well as supporting the development of security documentation and promoting security awareness across the organization to ensure consistent and effective security practices.
Role expectations
- Monitor and analyze security events, system access, and vulnerabilities across networks and systems to identify and respond to potential threats in a timely manner.
- Configure, manage, and optimize security tools and technologies (e.g., firewalls, antivirus, IDS/IPS) to ensure effective detection and mitigation of security risks.
- Conduct security assessments, vulnerability scans, and support risk evaluation processes by analyzing findings and recommending appropriate remediation actions.
- Support the detection, investigation, and response to security incidents, including root cause analysis and the identification of preventive measures.
- Contribute to the development, implementation, and enforcement of information security policies, standards, and procedures, ensuring alignment with regulatory and corporate requirements.
- Collaborate with cross-functional teams to strengthen the organization’s security posture and promote security awareness by providing guidance on best practices and potential risks.
What we're looking for
Typically required:
- Bachelor’s degree in information technology, computer science, or a related field.
- 3+ years of IT and/or cybersecurity experience including 2 years of working with users.
- Advanced English Level is also desirable.
- Basic knowledge of information security principles and practices.
- Familiarity with various network and host-based security applications and tools.
- Certifications like CompTIA Security+, Cisco CyberOps Associate, or other relevant certifications.
- Basic understanding of regulatory frameworks like ISO 27001, GDPR, and HIPAA.
- Experience working in a global organization