Description

We are seeking a Cyber Security Engineer to embed critical security practices throughout the entire project lifecycle, from initial planning to daily operations. In this role, you will act as a pivotal security consultant for internal teams and external vendors, conducting risk assessments and reviewing security architectures. Your day-to-day work will involve operationalizing vulnerability management, integrating advanced threat monitoring systems, and securing cloud deployments to ensure stringent compliance standards are consistently met.

Requirements

• Extensive hands-on experience with the Microsoft security ecosystem, including Azure, Entra ID, MS Intune, Microsoft 365, and Defender for Endpoint.
• Proficiency with endpoint protection and network security solutions such as CrowdStrike, Zscaler (ZIA, ZPA, Web DLP), and Proofpoint.
• Strong background in Identity and Access Management (IAM) and Privileged Access Management (PAM) utilizing tools like Okta and Entra.
• Experience with Security Information and Event Management (SIEM) tools, alerting, and log analysis, with a strong preference for Splunk.
• Solid understanding of network defenses including Firewalls, IPS/IDS, WAF, and DDoS/Bot Protection.
• Familiarity with Data Loss Prevention (DLP) configurations and implementations, preferably using Microsoft Purview and Zscaler.
• Knowledge of Application Security (AppSec) principles, secure coding concepts, and application risk assessments.
• Working knowledge of major cybersecurity and compliance frameworks, including HIPAA, NIST, and HITRUST.

Responsibilities

• Embed security and compliance requirements into all project phases, spanning initiation, planning, design, implementation, and operation.
• Conduct comprehensive security reviews and risk assessments for applications, cloud services, and third-party vendors.
• Manage and operationalize vulnerability scanning, patch management, and end-to-end remediation activities.
• Integrate and support security logging, continuous monitoring, incident response, and overarching threat management processes.
• Drive identity and access management (IAM) initiatives and privileged account management strategies across the enterprise.
• Provide expert security consulting to project teams and stakeholders regarding secure design, architecture, and implementation best practices.
• Validate and support cloud security policies, including the security approval and onboarding of new cloud and SaaS applications.
• Review and document security requirements, audit findings, and compliance evidence for internal projects and external vendors

Key Skills

Education

Any Graduate