Cyber Security Engineer – Enterprise Security & Risk Management

About the role

We are looking for a Cyber Security Engineer to strengthen our client’s enterprise security infrastructure and support IT risk management processes. The role involves implementing security controls, conducting assessments, and responding to incidents in a fast‑paced technology environment.

Key responsibilities

• Execute and maintain information security programs aligned with ISO 27001 and CIS frameworks.
• Manage networks, servers, identities and endpoints to ensure optimal security.
• Implement and operate firewalls and Secure Access Service Edge (SASE) solutions.
• Conduct vulnerability assessments and penetration testing using tools such as OWASP ZAP.
• Support DevSecOps processes and secure configuration of all IT assets.
• Monitor real‑time security threats and apply mitigation measures.
• Validate new technologies against security regulations and standards.
• Provide regular security updates to the board audit committee.
• Lead incident investigation, recovery and preventive actions.
• Participate in architecture discussions, offering risk and compliance recommendations.
• Assist in creating cybersecurity awareness and training materials.

Required profile

• Bachelor’s degree in Information Technology or a related field.
• 1–3 years of experience in a cybersecurity role.
• Hands‑on experience with application security penetration testing.
• Professional certifications from ISACA, (ISC)² or GIAC are a plus.
• Strong analytical, planning and organizational abilities.
• Detail‑oriented and quality‑focused mindset.

Required skills

• ISO 27001 and CIS security frameworks.
• Network security controls and firewall management.
• Secure Access Service Edge (SASE) solutions.
• OWASP ZAP for vulnerability testing.
• Penetration testing and vulnerability assessment techniques.
• DevSecOps tooling and secure configuration practices.
• Incident response management.

What we offer

• Dynamic, security‑focused technology environment.
• Exposure to enterprise cybersecurity operations and compliance.
• Career growth in cybersecurity, DevSecOps and governance.
• Continuous learning and professional development opportunities.