Information Security Engineer

About the role

The Information Security Engineer will protect the company’s information assets by ensuring confidentiality, integrity, and availability. You will work across security operations, incident response, vulnerability management, and data protection while collaborating with internal teams and external partners.

Key responsibilities

• Support and execute the incident response process, including detection, containment, eradication, recovery, and post‑incident reporting.
• Implement, configure, and monitor security tools such as firewalls, IDS/IPS, and SIEM platforms.
• Maintain patching and update cycles for operating systems, applications, and infrastructure.
• Manage identity and access controls, including privileged account management and least‑privilege enforcement.
• Provide security input and technical guidance for IT projects, conduct security impact assessments, and integrate security requirements into project lifecycles.

Required profile

• Bachelor’s degree in IT or a related field.
• 3–5 years of experience in IT security.
• Knowledge of ISO 9001, ISO 27001 and data protection regulations (DPA).
• Hands‑on experience with SIEM/SOAR, EDR/XDR, vulnerability scanning, and patch compliance.
• Practical implementation of MFA, conditional access, privileged access vaulting, and least‑privilege principles.
• Experience configuring DLP policies, encryption standards, secure backup/restore, and endpoint protection.

Required skills

• SIEM and SOAR platforms
• EDR/XDR solutions
• Vulnerability scanning tools
• Patch management processes
• MFA and conditional access
• Privileged access vaulting
• DLP policy configuration
• Encryption standards
• Secure backup and restore
• Endpoint protection
• Firewalls, IDS/IPS
• Identity and Access Management (IAM)