Senior Internet Security Expert

Description :

Key Responsibilities :

Security Architecture & Engineering :

- Define and enforce security standards, policies, and best practices.

- Evaluate and implement security tools, including firewalls, IDS/IPS, WAF, DLP, SIEM, and endpoint protection solutions.

Threat Management & Incident Response :

- Investigate, triage, and respond to security incidents, ensuring timely resolution and root-cause analysis.

- Conduct vulnerability assessments, penetration testing, and risk evaluations, providing recommendations for remediation.

Monitoring, Compliance & Governance :

- Ensure compliance with regulatory frameworks such as ISO 27001, NIST, GDPR, HIPAA, or other relevant standards.

- Prepare and maintain documentation including security runbooks, incident reports, and compliance evidence.

Collaboration & Leadership :

- Partner with IT, DevOps, Cloud, and Engineering teams to embed security into the SDLC and DevSecOps practices.

- Provide guidance, training, and mentorship to junior security team members.

- Lead cross-functional discussions, perform security reviews, and advise leadership on cybersecurity strategy.

Research & Innovation :

- Evaluate emerging tools/solutions and recommend improvements for organizational security maturity.

Required Skills & Experience :

• Network security (TCP/IP, VPN, Firewalls, IDS/IPS)
• Application security (OWASP, secure coding, API security)
• Cloud security (AWS/Azure/GCP security controls, IAM, CSPM, CASB)
• Web and internet security protocols (SSL/TLS, HTTP/HTTPS, DNS Security)

- Expertise in penetration testing, vulnerability scanning, and remediation (Nessus, Burp Suite, Qualys, etc.

- Knowledge of identity and access management, MFA, SSO, and Zero Trust architectures.

- Strong understanding of malware analysis, threat hunting, and incident response methodologies.

- Strong problem-solving, communication, and documentation skills.

Preferred Qualifications :

- Experience implementing DevSecOps, CI/CD security integrations.

- Background working in SOC environments or cybersecurity consulting.

- Knowledge of scripting languages such as Python, Bash, PowerShell