Nöord Technologies

Security Engineer

• Threat monitoring
• Proactively monitor and analyze security data to detect advanced threats and vulnerabilities.
• Produce key indicators (risk and performance) and actionable intelligence to strengthen the organization’s security posture.
• Manage security incidents, from initial analysis through full resolution.
• Conduct post-incident reviews and recommend preventive measures.
• Independently perform in-depth security assessments to identify vulnerabilities and recommend remediation strategies.
• Maintain the information security risk register, oversee audits, and assess vendor security practices.
• Develop information security awareness materials.
• Act as a subject-matter advisor to support cybersecurity program objectives and compliance initiatives.
• Draft, update, and maintain information security policies, procedures, and standards (access management, passwords, network security, PAP, etc.).
• Ensure documentation aligns with best practices (NIST, ISO 27001, etc.).
• Coordinate SOC 2 (Type 1 and Type 2) compliance activities, including audit readiness.
• Document and implement required security controls.
• Respond to security questionnaires from clients or partners (cybersecurity, privacy, business continuity, etc.).
• Collaborate with internal teams to obtain relevant technical or organizational responses.
• Participate in defining and implementing technical and organizational controls (access management, logging, backups, etc.).
• Develop security response procedures (incident response, vulnerability management, SIEM alert handling, etc.).
• Establish repeatable and well-documented processes.

Information Security Specialist