Cybersecurity Engineer  

The Cybersecurity Engineer is responsible for designing, implementing, monitoring, and continuously improving stakeholders’ security infrastructure to protect systems, networks, applications, and data from cyber threats. This role ensures the confidentiality, integrity, and availability of information assets while supporting business operations and IT solutions through proactive security controls, risk management, and incident response.

• Design, implement, and maintain security architectures, controls, and tools to protect IT and cloud environments.
• Monitor security events and alerts like Sophos and other security monitoring tools; investigate and respond to incidents in a timely manner.
• Conduct vulnerability assessments, penetration testing coordination, and security risk assessments; recommend and implement remediation measures.
• Implement and enforce security policies, standards, and procedures aligned with industry best practices and regulatory requirements.
• Manage endpoint, network, application, and cloud security controls including firewalls, IDS/IPS, EDR, and identity and access management.
• Support security aspects of cloud platforms such as AWS and Huawei.
• Collaborate with project teams and other technical consultant to embed security into system design, development, and deployment (DevSecOps).
• Prepare and maintain security documentation, risk registers, incident reports, and standard operating procedures.
• Provide security guidance, awareness, and technical support to internal teams and clients as needed.

Required Skills and Competencies
Strong understanding of cybersecurity principles, risk management, and threat landscapes.
Hands-on experience with security tools such as SIEM, firewalls, IDS/IPS, endpoint protection, and vulnerability scanners.
Knowledge of network security, encryption, authentication, and access control mechanisms.
Familiarity with cloud security concepts and shared responsibility models.
Experience with Linux and/or Windows server security hardening.
Strong analytical, investigative, and problem-solving skills.
Ability to communicate security risks and recommendations to both technical and non-technical stakeholders.

Minimum Qualifications
Bachelor’s degree in Information Technology, Computer Science, Computer Engineering, or a related field.
At least 1–3 years of experience in cybersecurity, information security, system administration, or network security.
Basic experience working with security controls in on-premise and/or cloud environments.
Knowledge of networking concepts such as TCP/IP, VPN, DNS, firewalls, and network segmentation.

Preferred Qualifications
Security certifications such as CCNA, Comptia+ Security, or cloud security certifications.
Experience with compliance frameworks and standards such as ISO 27001, SOC 2, NIST, or data privacy regulations.
Experience in incident response, digital forensics, or security operations center (SOC) environments.
Exposure to DevSecOps practices and secure software development lifecycle (SDLC).
Experience supporting enterprise or client-facing IT and business management solutions.