Description

You design, build, deploy, and maintain enterprise security technologies and solutions aligned with business objectives and compliance requirements.

Responsibilities

• Develop, document, and enforce security policies, standards, and procedures based on frameworks like NIST, CIS, ISO 27001, and SOX.
• Lead strategic security initiatives, including Zero Trust architecture, Data Loss Prevention (DLP), Cloud Security, Network Segmentation, IAM, and security automation.
• Manage email security, DNS security, and protective controls to defend against threats.
• Lead vulnerability management programs and drive remediation efforts, reporting risk visibility to stakeholders.
• Oversee the incident response lifecycle, continuously enhancing disaster recovery and business continuity plans.

Required Skills

• 7+ years of experience in information security engineering, architecture, or operations.
• Expertise in cloud security across AWS, Azure, and GCP.
• Hands-on experience with key security technologies: firewalls, VPN, NAC, EDR/MDR, IPS/IDS, SIEM, DLP, and vulnerability management.
• Strong understanding of Zero Trust, endpoint protection, DevSecOps, and security automation.
• Proficiency in scripting languages including Python, PowerShell, and Bash.
• Proven ability to lead incident response, risk assessments, and threat detection efforts.
• Knowledge of security frameworks: NIST CSF, CIS Controls, ISO 27001, SOX.
• Experience implementing DNS protection solutions.

Key Skills

Education

Bachelor's degree