Senior Engineer, Information Security

Responsibilities:

• Performs risk analysis, vulnerability assessment, pen-testing, source code review, and provides recommendations for remediation.
• Performs security controls effectiveness assessments.
• Performs security-related analysis and testing in the web development process.
• Reviews/monitors company IT systems, security alerts, and suspicious activities.
• Investigates security incidents. Reporting security breaches.
• Maintaining the InfoSec Program documentation.
• Provides information security education and training.

Requirements:

• CCNA Security
• CEH
• Certification for Web Application Security.
• Professional experience in web pen testing, risk analysis, vulnerability assessment, and incident response.
• Working knowledge of computer programming languages and scripts.
• Working knowledge of operating systems (Windows, Linux).
• Professional experience implementing and managing security systems including IDS, SIEM, and Vulnerability Management.
• Strong knowledge of security architecture and design.
• Familiarity with databases and web servers.
• Familiarity with cloud computing technologies.
• Knowledge of ISO 27k standard.
• Excellent security document writing and reporting skills.
• Good communication skills.
• 3+ years of experience in a like role.