Information Security Engineer

About the role

The Information Security Engineer will design, implement and manage advanced security measures to protect client digital assets. This position focuses on software security and requires strong expertise in security technologies, secure development practices, and the ability to mentor technical teams.

Key responsibilities

• Design and implement robust security architectures covering network, application and data layers.
• Develop, enforce and maintain security policies, standards and procedures.
• Integrate secure software development lifecycle practices, conduct code reviews and vulnerability assessments.
• Perform security testing including static and dynamic analysis, penetration testing and threat modeling.
• Lead risk assessment activities, vulnerability scanning and remediation coordination.
• Coordinate incident response from detection through recovery and conduct post‑incident analysis.
• Manage security monitoring tools such as SIEM, IDS/IPS and firewalls, and analyze logs for suspicious activity.
• Support compliance with ISO 27001, PCI DSS, NIST, GDPR and assist with internal and external audits.

Required profile

• Bachelor’s degree in Communication Engineering, Computer Science, Information Security, Cybersecurity or a related field.
• 1‑3 years of experience in information security with a focus on security engineering and software security.
• Strong knowledge of security technologies and secure software development practices.
• Relevant certifications such as CISSP, CEH, OSCP or equivalent.
• Experience with cloud, network and application security.
• Excellent problem‑solving abilities and capacity to work collaboratively with development and operations teams.

Required skills

• Firewalls
• Encryption
• IDS/IPS
• SIEM
• Endpoint protection
• Secure coding practices
• Static and dynamic analysis
• Penetration testing
• Vulnerability scanning
• Threat modeling
• Cloud security
• Network security
• Application security
• Compliance standards (ISO 27001, PCI DSS, NIST, GDPR)