Job Description

Responsibilities

• Leading efforts to counter security breaches and anticipating and reducing the likelihood of future security alerts, incidents, and disasters.
• Defining, planning, implementing, maintaining, and upgrading security measures, policies, and controls.
• Monitor the company's networks to keep an eye out for any security breaches and investigate it if one does occur.
• Writing reports and providing insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
• Assisting with the creation of updates and training programs to secure the network and train the employees.
• Keeping the security systems up to date.
• Documents security breaches and assesses impact.
• Mitigates vulnerabilities to maintain a high-security standard.
• Monitor the company's networks to keep an eye out for any security breaches and investigate it if one does occur.
• Monitoring security access and maintaining the relevant data.
• Conducting vulnerability testing and risk analyses to assess security and performing internal and external security audits.
• Analysing security breaches to identify the cause and to update incidence responses and disaster recovery plans.
• Verifying and coordinating security plans with outside vendors.
• Creating procedures for IT employees and training them in security awareness.
• Perform penetration testing.
• Uses data encryption, firewalls, and other related security tools and applications to protect confidential digital information

Technical Skills

• Strong understanding of network and application security concepts
• Experience with security tools and technologies (vulnerability scanners, DLP, SIEM, IDS/IPS etc.)
• Experience in source code review, wireless assessment, and mobile application (Android, iOS) assessment.
• Capable identifying flaws like injection, XSS, security misconfiguration, sensitive data exposure, CSRF, invalidated redirects etc.
• Proficiency in diverse operating systems and security tools
• Understanding of security frameworks (NESA, NIST CSF, CIS Controls)
• Strong understanding of Windows servers and Network infrastructure

Additional Requirements

• Bachelor's degree in computer science or related field
• Minimum of 5 years of proven experience in IT security
• Security certifications such as CISA, CISSP will be an advantage
• Excellent verbal and written communication skills, interpersonal, and teaching skills.
• Good anticipation, analytical, and problem-solving skills.
• The ability to remain current on the latest technology and best practices in information security.

Job Type: Full-time