Security Engineer

• Support maintenance and continuous improvement of the Information Security Management System (ISMS) aligned with ISO 27001:2022
• Update and maintain policies, processes, and procedures to reflect evolving security controls and compliance requirements
• Assist in risk assessments, control evaluations, and internal security reviews
• Configure, maintain, and create use cases and playbooks in Wazuh SIEM and SOAR platforms for enhanced threat detection and automated incident response
• Conduct vulnerability management for infrastructure and applications using tools such as Nessus, Snyk, and Fortinet
• Participate in incident response activities, including investigation, containment, remediation, and reporting
• Support continuous monitoring and alerting through SOC operations
• Contribute to threat intelligence gathering, focusing on Indicators of Compromise (IoCs) by geography and industry
• Monitor and manage IP reputation and malicious domain blocking in line with regulatory and compliance requirements
• Support periodic IAM reviews, user cleanup, and recertification processes to enforce least privilege and proper access control
• Collaborate with IT to ensure consistent enforcement of IAM policies and account lifecycle management
• Help execute and evaluate phishing and ransomware simulations using Smartfense and others
• Assist in external security audits with providers and clients, supplying evidence and documentation as required
• Support internal control testing, on-demand audits, and penetration testing for platforms, processes, and third parties
• Participate in security reviews for information exchange with vendors and partners
• Support the implementation, deployment, and management of Data Loss Prevention (DLP) tools and processes, including data classification and monitoring
• Maintain and optimize Defender, Fortinet, and Linux-based security tools
• Use Wireshark and Zabbix for traffic analysis, anomaly detection, and network performance monitoring

Information Security Engineer

Information Security Manager

Mid-Level Customer Success Manager, Cybersecurity