Information Technology Security Engineer

Role Overview

We are looking for a skilled IT Security Officer to manage daily cybersecurity operations including vulnerability management, incident response, security service oversight, and compliance monitoring for both on-premises and cloud setups. You will collaborate closely with infrastructure, application, and security teams plus external vendors to pinpoint security threats, coordinate fixes, and ensure adherence to cybersecurity policies and government regulations.

Key Responsibilities

• Coordinate and manage vulnerability assessments and resolution across various environments such as servers, endpoints, applications, infrastructure, and Azure cloud.
• Employ tools like TenableOne, Cloudscape, or similar to detect and track vulnerabilities.
• Evaluate assessment outcomes, patch compliance, and the progress of remediation efforts.
• Document and monitor unresolved vulnerabilities, risk acceptance cases, and exceptions in remediation.
• Escalate critical vulnerabilities and delays in remediation to stakeholders promptly.
• Uphold compliance with IM8 standards and internal security policies in vulnerability management.
• Assist in cybersecurity incident detection, investigation, containment, and recovery activities.
• Work with internal teams, the Chief Information Security Officer (CISO), and external partners to coordinate incident responses.
• Maintain detailed records on incidents, findings, and corrective actions taken.
• Monitor incident patterns and suggest enhancements to security operations.
• Support DDoS protection and Web Application Firewall (WAF) activities, including monitoring alerts and managing service performance.
• Coordinate updates to WAF policies and security rules, and help investigate suspicious web traffic or attacks.
• Collaborate with security vendors to resolve operational challenges and maintain service efficacy.
• Oversee cybersecurity coordination with infrastructure, applications, facilities management, and external teams.
• Maintain comprehensive security risk registers and remediation tracking documents.
• Follow up on findings from audits, assessments, and incidents, escalating significant risks when necessary.
• Compile cybersecurity reports, dashboards, and updates for management, maintaining awareness of vulnerability remediation, patch levels, and incident statistics.
• Assist in audits, compliance checks, and evidence gathering aligned with IM8 and other cybersecurity frameworks.

Candidate Requirements

• Diploma or Bachelor’s degree in IT, Cybersecurity, Computer Science, Information Systems, or related fields.
• Between two to five years of experience in IT security or cybersecurity operations focused on vulnerability and incident management.
• Practical experience with vulnerability management tools such as Tenable or similar.
• Solid understanding of vulnerability assessments, patching processes, security monitoring, and incident response.
• Experience with Microsoft Azure security platforms and cloud services.
• Fundamental knowledge of network, server, application, and infrastructure security principles.
• Familiarity with security standards and frameworks like IM8, NIST, ISO 27001, or CIS Controls.
• Exposure to DDoS mitigation and Web Application Firewall technologies is a plus.
• Experience supporting security governance, audits, and compliance, ideally in enterprise or governmental settings.
• Competency in Microsoft Excel and PowerPoint for data analysis and reporting.
• Excellent analytical thinking, problem-solving abilities, communication skills, and stakeholder coordination.
• Capable of managing multiple tasks independently or within a team environment.

Preferred Certifications

• Microsoft Azure or related Microsoft Security Certifications.
• CompTIA Security+ certification.
• Certified Ethical Hacker (CEH).
• ISC2 Certified in Cybersecurity (CC).
• CISSP or CISM certifications are advantageous but not compulsory.