Remote Cyber Security Engineer

View full description

Requirements:

• 3+ years of experience in cybersecurity roles, with a focus on cloud security, network security, and incident response.
• Strong experience with Azure and AWS security configurations.
• Expertise in managing VPNs, firewalls, and endpoint security.
• Proven experience with penetration testing, vulnerability assessments, and leading disaster recovery plans.
• Knowledge of PCI DSS compliance is a strong plus.
• At least one relevant certification required (e.g., CISSP, CEH, CompTIA Security+, CCSP).
• Hands-on experience with ransomware prevention and phishing simulations.

Responsibilities:

• Oversee the overall security of our infrastructure, including cloud environments (Azure and AWS) and core applications, ensuring robust protection across all systems and layers.
• Implement and maintain secure configurations for all cloud services, networks, and applications, safeguarding the organization’s critical assets and data.
• Manage and enforce identity and access management policies, ensuring proper access controls are in place for all users, systems, and devices.
• Ensure that all business-critical applications are fully secured against vulnerabilities, regularly perform assessments, and address potential security gaps.
• Manage the security of all employee devices, including enforcing BYOD policies and ensuring endpoint security measures are consistently applied.
• Design and maintain secure network architectures, including VPNs, firewalls, and monitoring to protect internal and external communications.
• Lead the development and implementation of disaster recovery and incident response plans, ensuring quick and effective responses to security incidents.
• Conduct regular penetration testing and vulnerability assessments to proactively identify and mitigate potential threats.
• Implement and manage strategies for ransomware prevention and conduct phishing simulations to educate and protect employees.
• Ensure that all systems and processes adhere to industry regulations, with a focus on PCI DSS compliance and other relevant standards.