Security Engineer

Greetings from DSRC!!!

DSRC provides competitive compensation that is revised purely on performance, flexible work hours & friendly work environment. At DSRC you will have opportunity not only to learn but also explore your area of interest with respect to technology and also effectively use the skills acquired over few years of IT experience.

Experience: 3 to 5 years

Requirement: Security Engineer

Work from home will be available on an optional basis.

Requirements:

• Minimum of 3 years’ experience working within the cyber security sector
• Bachelor’s degree preferably in Information Technology, Computer Science, Software or Cyber Security or relevant certification
• Experience with AWS cloud security as well as physical networks and firewalls
• Knowledge of NIST framework and security best practices
• Experience collaborating with cross-functional teams to embed security into the development lifecycle
• Proficiency in managing and optimizing security technologies and tools
• Ability to work independently and coordinate programs of work across multiple teams
• Strong written and spoken communication skills
• Familiarity with SSDLC, Shift Left and application security principles

Responsibilities:

• Assist in the implementation and operation of the security programmes and projects as required including the SSDLC
• Implementing and maintaining network, intrusion detection and prevention systems as well as other security tools in a hybrid cloud environment
• Be aware of the latest threats in cybersecurity to guide and advise the organization regarding the protection of systems
• Creating, testing and validating security capabilities to identify vulnerabilities/gaps and build appropriate detection and response countermeasures
• Serve as a technical resource for the security operations team during active response efforts
• Monitor and improve staff security awareness training
• Track, record, and monitor identified security issues through to completion
• Support Identity technology stack by performing various identity, access and data protection activities including monitoring and enhancements to ensure that the security systems are operational and effective
• Assist with implementation and management of data security policies including data loss prevention, privileged access management, insider risk management, business continuity planning and disaster recovery testing
• Assist with the design, engineering and management of automations to improve workflows and inefficiencies related to security processes
• Assist in responding to audits, penetration tests and vulnerability assessments
• Develop, manage, and measure KPIs, KRIs and additional metrics to understand the trends, quality, and insights from the vulnerability detection results to facilitate business decisions, automation development, and update of executive dashboards, reports and templates
• Ensure that the company’s sensitive information and IT equipment are kept safe by implementing the correct security measures
• Engage 3^rd party vendors and perform vendor assessments and track vendor compliance
• Ability to multitask
• Advanced knowledge of operating systems (Windows, Unix, Mac OS) and technologies supported by major cloud service providers