Description

Lead security architecture, vulnerability management, and incident response for enterprise networks and applications.

Responsibilities

• Execute penetration testing, vulnerability assessments, and remediation activities across network and endpoint infrastructure.
• Design and implement secure network architectures, ensuring compliance with enterprise policies and regulatory standards.
• Integrate security into the SDLC by reviewing code, conducting security testing, and developing automated security tools.
• Manage incident response for security events and maintain IT security policies aligned with COBIT, ITIL, and ISO 27002.
• Train engineering teams on secure coding practices and common security vulnerabilities.

Required Skills

• 7+ years of professional IT security experience, including policy development and security architecture.
• Proficiency in Python, Go, Ruby on Rails, Java, C/C++, or .NET for security tool development.
• Hands-on experience with enterprise system administration across multiple operating systems.
• Expertise in configuring and managing firewalls, IPS (Cisco ASA, Palo Alto), and vulnerability scanning tools.
• Strong knowledge of secure web architectures, network design, and client/server security.
• Experience developing security metrics, risk registers, and incident response plans.
• Professional security certification such as CISSP, CISM, or CISA.

Preferred Skills

• Master’s degree in Computer Sciences or Information Technology.
• Experience with Splunk for security information and event management.

Key Skills

Education

  Bachelor's degree in information technology, Computer Sciences