Description : Specialist Information Security (Security Engineer)

Role Overview :

Hands-on Security Engineer responsible for designing, implementing, and improving enterprise security controls across endpoint, identity, network, cloud, and application security. The role focuses on security engineering and platform ownership, not day-to-day SOC operations.

Key Responsibilities :

- Design, implement, and optimize security controls across endpoint, identity/PAM, network, cloud, and application domains

- Act as technical owner for multiple security platforms, ensuring configuration, integration, tuning, and lifecycle management

- Engineer and maintain EDR and threat protection solutions (CrowdStrike, Trellix, Halcyon)

- Design and manage email security and anti-phishing controls (Proofpoint)

- Implement and support IAM/PAM and identity monitoring solutions (CyberArk, AD Audit Plus)

- Secure cloud and SaaS environments in Azure and hybrid setups using Prisma Cloud

- Protect internet-facing applications and APIs using Cloudflare and Datadome (WAF, DDoS, bot mitigation)

- Perform vulnerability analysis, risk assessments, and drive remediation

- Support security incidents through technical investigation and root-cause analysis

- Leverage SIEM platforms (Microsoft Sentinel, Splunk) for detection engineering and threat visibility

- Develop security documentation, architecture diagrams, standards, and policies

- Collaborate with IT, Cloud, Application, Risk, and Compliance teams

- Support audits and compliance by providing technical evidence and validation

- Mentor junior engineers and contribute to security best practices

Experience & Skills :

- 8 - 10 years of hands-on experience in security engineering or enterprise information security

- Experience across endpoint, identity, network, cloud, and application security

- Hands-on experience with :

1. EDR / Threat Protection: CrowdStrike, Trellix, Halcyon

2. Email Security: Proofpoint

3. IAM / PAM: CyberArk, AD Audit Plus

4. Network Security: Illumio, ExtraHop

5. Cloud & App Security: Azure, Prisma Cloud, Cloudflare, Datadome

- Strong understanding of TCP/IP, network protocols, traffic analysis, and Windows/Linux/macOS

- Experience working in hybrid and cloud environments (Azure preferred)