Cyber Security Engineer Job in Zazz

• Security Infrastructure Management: Design, implement, and maintain security infrastructure, including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus software, encryption tools, and other security-related technologies.
  
• Vulnerability Assessment and Penetration Testing: Conduct regular security assessments to identify vulnerabilities and weaknesses in the organization's systems. Perform penetration testing to evaluate the resilience of security measures against real-world attacks.
  
• Incident Response: Develop and execute incident response plans to address and mitigate security breaches and cyber incidents. Investigate and analyze security incidents to determine their root cause and prevent future occurrences.
  
• Security Policy and Procedure Development: Create and update security policies, standards, and procedures that align with industry best practices and compliance requirements. Ensure the organization's security policies are followed by all employees and stakeholders.
  
• Security Monitoring and Analysis: Monitor network traffic, system logs, and security alerts to detect and respond to potential security threats. Implement security information and event management (SIEM) solutions for efficient security monitoring.
  
• Identity and Access Management (IAM): Manage user access and permissions to systems and data, implementing role-based access controls (RBAC) and multi-factor authentication (MFA) where appropriate.
  
• Security Training and Awareness: Conduct security awareness training for employees to educate them about cybersecurity best practices and raise awareness about potential threats.
  
• Patch Management: Monitor and apply security patches and updates to operating systems, software, and applications to address known vulnerabilities.
  
• Security Compliance: Ensure compliance with relevant cybersecurity regulations, industry standards, and internal security policies.
  
  

Requirements

• Strong understanding of cybersecurity principles, technologies, and best practices.
  
• Knowledge of various security tools and technologies, such as firewalls, IDS/IPS, SIEM, antivirus software, etc.
  
• Experience with vulnerability assessment and penetration testing tools and methodologies.
  
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls).
  
• Proficiency in scripting and programming languages (e.g., Python, Bash) for security automation and analysis.
  
• Understanding of network protocols and network security concepts.
  
• Analytical and problem-solving skills to identify and respond to security incidents.