Role & Responsibilities :

- Lead the design, implementation, and improvement of enterprise security solutions across applications, infrastructure, cloud, and networks.

- Perform security assessments, vulnerability management, penetration testing coordination, and risk analysis.

- Drive incident response activities, including investigation, containment, root-cause analysis, and remediation.

- Develop and maintain security monitoring capabilities using SIEM, EDR, SOAR, and threat intelligence platforms.

- Design and enforce security controls aligned with industry standards such as ISO 27001, NIST, CIS, and OWASP.

- Collaborate with engineering, DevOps, cloud, and infrastructure teams to embed security into the software development lifecycle (DevSecOps).

- Conduct security architecture reviews for applications, APIs, cloud environments, and infrastructure changes.

- Identify emerging threats and recommend proactive security improvements.

Preferred Candidate Profile :

- Bachelors degree in Computer Science, Information Security, Engineering, or a related field.

- 5-8 years of experience in cybersecurity, information security, or security engineering roles.

- Strong hands-on experience in areas such as :

1. Security operations (SOC), SIEM, EDR, and threat monitoring

2. Vulnerability management and remediation

3. Application security and secure coding practices

4. Cloud security (AWS/Azure/GCP)

- Experience with security tools such as :

1. SIEM platforms (Splunk, Microsoft Sentinel, QRadar, Elastic)

2. Vulnerability scanners (Qualys, Tenable, Rapid7)

3. EDR solutions (CrowdStrike, Defender, SentinelOne)

4. Cloud security tools and IAM platforms

- Good understanding of :

1. OWASP Top 10

2. Threat modeling

3. Security architecture principles

4. Encryption, authentication, and access control mechanisms

5. Secure SDLC and DevSecOps practices

- Preferred certifications :

1. CISSP

2. OSCP

3. CEH

4. CCSP

5. AWS Certified Security Specialty

6. GIAC certifications