Cybersecurity Engineer (in-house)

Role Overview As an in-house Cybersecurity Engineer, you will protect our organization’s digital assets, network infrastructure, and data from cyber threats. You will bridge the gap between IT operations and information security by building robust defenses, actively monitoring for threats, managing vulnerabilities, and driving our incident response efforts. Key Responsibilities Security Operations & Incident Response

• Continuously monitor network traffic, system logs, and security alerts using enterprise SIEM and EDR platforms.

• Lead the triage and investigation of security incidents, coordinating containment, root-cause analysis, and recovery efforts.

• Write and maintain incident response playbooks for diverse threat scenarios (e.g., malware, phishing, data exfiltration).

Vulnerability & Attack Surface Management

• Perform regular vulnerability assessments across on-premises and cloud environments.

• Track identified exposures and collaborate with system owners to prioritize and implement timely remediation.

• Support or conduct routine penetration testing and security audits to proactively identify weaknesses.

Infrastructure Security & Architecture

• Administer, configure, and maintain security technologies including firewalls, endpoint protection, IAM, and DLP solutions.

• Implement Zero Trust security principles and assist in designing secure network and cloud architectures.

• Oversee access controls and encryption implementations to secure data at rest and in transit.

Compliance & Internal Collaboration

• Assist in supporting cybersecurity frameworks, risk assessments, and compliance initiatives.

• Provide security training and awareness programs to educate internal employees on best practices.

• Collaborate with internal departments and IT teams to natively integrate secure practices into system lifecycles.

Qualifications & Skills

• Bachelor’s degree in IT, Computer Science, Cybersecurity, IT, or equivalent

• Min. 3 years of experience in Cybersecurity or IT security engineering

• Hands-on experience managing security tools like SIEM, EDR, NDR, vulnerability scanners as well as knowledge on security frameworks e. NIST, ISO/IEC 27001 etc.

• Understanding of networking protocols, operating systems (Windows/Linux), and cloud environments (AWS, Azure) preferred

• Soft Skills: Strong analytical thinking, problem-solving skills, and the ability to translate technical security risks to non-technical stakeholders.

Preferred Certifications

• Certifications such as CISSP, CISM, CRISC, CompTIA Security+ will be advantageous