Cyber Security Engineer

We are looking for a Cyber Security Engineer to strengthen and advance our security environment. This position will focus on protecting infrastructure, applications, and data by developing practical safeguards, evaluating risk, and improving defensive capabilities across the organization. The ideal candidate brings hands-on technical expertise, sound judgment during security events, and the ability to collaborate effectively with teams throughout the business.

Responsibilities:

• Develop, deploy, and refine security controls that protect enterprise networks, systems, and business-critical information.

• Monitor the security landscape for suspicious activity, investigate alerts, and coordinate timely response actions when issues arise.

• Review technical environments against defined security expectations and support secure day-to-day operation and maintenance practices.

• Identify weaknesses across infrastructure, applications, and configurations, then drive remediation efforts to reduce exposure.

• Evaluate third-party vendors for adherence to organizational security standards and risk management expectations.

• Partner with infrastructure, application, and business teams to embed security requirements into projects and operational processes.

• Track emerging threats, tools, and best practices, and recommend practical improvements that strengthen the overall security posture.

• Help ensure compliance with relevant privacy, security, and regulatory obligations through assessments, documentation, and control validation.

• Provide technical guidance to stakeholders on security best practices related to networks, cloud services, web applications, and email protection.

• 5+ years of experience in cybersecurity, information security, or a closely related technical field.

• Formal education or training in Cybersecurity, Computer Science, Information Systems, or a comparable discipline.

• Working knowledge of firewall platforms and network security technologies, including tools such as Check Point and Cisco ASA.

• Solid understanding of network architecture, intrusion detection concepts, web application security, cloud security, and email security.

• Familiarity with security monitoring and event analysis practices, including the use of SIEM and related defensive technologies.

• Knowledge of established security frameworks and control standards used to assess and improve security programs.

• Ability to evaluate threats, recommend effective mitigations, and communicate risks clearly to technical and non-technical audiences.

• Relevant industry certifications such as CISSP, CISM, or similar credentials are considered an asset.4