Information Technology Security Engineer

Job Summary:

TheIT Security Engineeris responsible for implementing, managing, and maintaining the company's cybersecurity infrastructure and ensuring compliance with security standards and best practices. This role plays a critical part in strengthening the company's overall IT security posture by managing firewall configurations, overseeing endpoint protection, ensuring timely patch management, and coordinating with internal and external teams to proactively monitor, detect, and remediate threats. The position reports directly to theIT Infrastructure Managerand works closely with theSystem AdministratorandIT Security Officerhandling ISO 27001 compliance.

Key Responsibilities:

Network and Perimeter Security

• Configure, manage, and maintain enterprise firewalls, includingPalo Alto, Checkpoint, and Fortinetdevices.
• Monitor firewall performance, logs, and alerts to identify potential security breaches or misconfigurations.
• Implement network segmentation and access control policies to safeguard critical systems.

Microsoft 365 and Endpoint Security

• AdministerMicrosoft 365 security and compliance tools, includingEnterprise Mobility, MDM, Purview, and Intune.
• Manage deployment, configuration, and enforcement of security policies across users and devices.
• Monitor M365 alerts and security dashboards, ensuring prompt response and remediation of issues.

Security Operations and Incident Response

• Coordinate with theManaged Security Operations Center (MSOC)team to monitor and remediate alerts.
• Participate in incident response efforts, ensuring containment, eradication, and recovery procedures are executed effectively.
• Conduct root cause analysis and prepare post-incident reports.

Patch and Vulnerability Management

• Overseepatch management processesfor all servers and endpoints to ensure systems remain up to date and secure.
• Work with relevant teams to identify, prioritize, and remediate vulnerabilities.

Compliance and Collaboration

• Collaborate closely with theSystem AdministratorandIT Security Officerto ensure alignment withISO 27001standards and cybersecurity best practices.
• Support security audits, documentation, and continuous improvement initiatives.

Cybersecurity Strategy and Awareness

• Contribute to strengthening the company's cybersecurity defenses against breaches, ransomware, malware, and viruses.
• Support the development and implementation of security awareness programs for end users.

Qualifications:

Education and Experience

• Bachelor's degree in Information Technology, Computer Science, or related field.
• At least35 years of experiencein IT security, network administration, or system administration roles.
• Hands-on experience with enterprise firewalls (Palo Alto, Checkpoint, Fortinet) and Microsoft 365 security tools.

Certifications (Preferred but not required)

• CompTIA Security+,CEH,CISSP,Microsoft Certified: Security Administrator Associate, or equivalent certifications.

Skills and Competencies

• Strong understanding of network protocols, threat detection, and incident response.
• Excellent knowledge of endpoint protection, MDM, and patch management tools.
• Analytical mindset with attention to detail and problem-solving capabilities.
• Ability to work effectively with cross-functional teams in a fast-paced environment.

Reporting Line:

• Reports To:IT Infrastructure Manager

Coordinates With:System Administrator, IT Security Officer, and MSOC Team