Senior IT Security Engineer (1-year renewable contract)

Dear Candidate,

If you or someone in your professional network is interested in this opportunity, please submit your CV directly to [HIDDEN TEXT] (this is the preferred method, as a high volume of applications may cause some CVs to be overlooked).

Please be advised that we are currently unable to provide visa sponsorship for this role.

Position Overview

We are seeking a seasoned IT Security Engineer to enhance our enterprise cybersecurity framework, focusing on security operations, governance, infrastructure security, and risk mitigation. The successful candidate will be responsible for maintaining security controls, investigating potential security threats, managing vulnerabilities, and collaborating with internal teams and external partners to strengthen the organization’s overall security posture.

Core Responsibilities

1. Security Governance & Compliance

. Develop, implement, and update information security policies, technical standards, procedures, and security baselines aligned with industry best practices and regulatory standards.

. Conduct periodic security audits and ensure adherence to security controls, system hardening standards, and CIS benchmarks.

. Support cybersecurity risk assessments, audits, third-party reviews, and remediation efforts.

. Provide guidance to IT, application, infrastructure, and cloud teams on security best practices and security-by-design principles.

. Assist with initiatives related to personal data protection and data privacy security requirements.

2. Security Operations & Incident Management

. Continuously monitor security events, emerging threats, and the organization’s cybersecurity health.

. Investigate alerts utilizing SIEM and other security monitoring tools, conduct initial triage, and escalate critical incidents as necessary.

. Lead security incident response efforts from investigation to containment, remediation, and resolution.

. Stay updated on threat intelligence and vulnerabilities, providing relevant advisories and patching recommendations.

. Enhance security monitoring, detection rules, alert accuracy, and incident response procedures.

3. Vulnerability Management & Security Testing

. Coordinate vulnerability assessments, penetration tests, and security reviews across applications, networks, servers, endpoints, and cloud environments.

. Analyze security findings, recommend remediation strategies, and ensure timely implementation of corrective actions.

. Conduct security and compliance checks on computing devices prior to network connection.

4. Infrastructure, Endpoint & Access Security

. Configure, maintain, and optimize security tools to ensure seamless integration with the organization’s IT infrastructure.

. Implement and oversee security controls across on-premises and cloud-based environments, covering networks, systems, endpoints, identity management, and runtime environments.

. Manage endpoint protection solutions such as antivirus, EDR/XDR, and privileged access management (PAM) systems like CyberArk.

. Perform regular reviews of user accounts, privileged access, permissions, access logs, and reports from third-party service providers.

. Support secure network architecture, system hardening, access control policies, and infrastructure security monitoring.

5. Security Solutions & Vendor Coordination

. Identify opportunities to enhance security capabilities and collaborate with external vendors on designing, testing, deploying, and handing over cybersecurity solutions.

. Manage relationships with third-party security service providers, review their performance and security reports, and ensure compliance with established standards and SLAs.

. Oversee the deployment, maintenance, testing, and monitoring of security technologies such as WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management tools.

6. Security Awareness & Reporting

. Lead security awareness programs and training sessions for employees and external service providers.

. Maintain comprehensive documentation covering security policies, procedures, incidents, vulnerability assessments, and control reviews.

. Prepare and deliver regular reports on security incidents, vulnerability mitigation, compliance status, risk exposure, and progress on security initiatives.

. Collaborate closely with internal IT teams, business stakeholders, cloud service providers, and external partners on security initiatives.

Qualifications & Requirements

Educational Background & Experience

. Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.

. Minimum of 5 years of relevant experience in cybersecurity, IT security operations, security controls, IT infrastructure security, or security auditing.

. Proven hands-on experience in security operations, vulnerability management, incident response, access control, and enterprise security technologies.

Technical Skills

. Practical experience with security tools such as SIEM, WAF, antivirus solutions, EDR/XDR, PAM, and vulnerability assessment platforms.

. Strong knowledge of threat analysis, incident handling, vulnerability remediation, endpoint protection, identity and access management, secure network architecture, and system hardening.

. Solid understanding of enterprise IT infrastructure, security monitoring, logging, and configuration standards for both on-premises and cloud environments.

. Familiarity with security standards and frameworks such as ISO 27001, NIST CSF, and CIS benchmarks.

. Experience with cloud security environments like Microsoft Azure, AWS, or similar platforms is a plus.

. Knowledge of scripting, automation, Infrastructure as Code (IaC) security, CI/CD security, or security orchestration tools is advantageous.

Certifications

. Certifications such as CISSP, CISM, CISA, or similar cybersecurity credentials are preferred.

. Additional certifications like CCSP, Microsoft Security/Azure Security, AWS Certified Security, or GIAC certifications are considered a plus.