Junior Security Engineer

Job Summary:

As a Junior Information Security Engineer, you will be responsible for proactively and reactively monitoring security breaches and taking remedial actions. You will be part of a Security Operations Center (SOC) team, investigating suspicious activities, maintaining security monitoring tools, conducting penetration tests, and documenting security breaches. Your work is vital in ensuring the security and stability of our IT systems and networks.

Responsibilities:

• Monitoring and Investigation:
  • Proactively monitor the security of critical servers, systems, and infrastructure.
  • Monitor and review alarms generated by security systems and take necessary actions, including prioritization and escalation when required.
  • Investigate suspicious activities to determine the root cause of security incidents using system logs and other available resources.
• Incident Response and Remediation:
  • Take appropriate action to respond to and mitigate security incidents, referring to the organization’s runbook for guidance.
  • Assist in incident documentation, including the context and findings, and ensure that incidents are properly closed, put on hold, or escalated as needed.
  • Provide additional analysis support to colleagues during incident resolution.
• Continuous Improvement:
  • Participate in regular team meetings and scrums to discuss incidents, response strategies, and lessons learned.
  • Contribute to continuous improvement sessions to optimize incident handling and response procedures.
  • Identify weaknesses in security controls and recommend improvements.
• Testing and Tuning Security Tools:
  • Assist in testing and fine-tuning security alarms and incident response procedures.
  • Ensure that security monitoring tools are effective and up-to-date, contributing to securing and monitoring systems.
• Collaboration and Teamwork:
  • Collaborate closely with team members to ensure priorities are aligned and action is taken efficiently during incidents.
  • Engage in ongoing learning and share knowledge with peers to improve the security posture of the organization.

Required Qualifications:

• Core Competencies:
  • Analytical thinking and strong conceptual thinking.
  • Team player with excellent collaboration skills.
  • Security-driven mindset with a focus on continuous improvement.
  • Strong communication skills and customer orientation.
  • Willingness and eagerness to learn new security practices and technologies.
• Technical Skills:
  • Proficiency with Microsoft Windows operating systems.
  • Familiarity with ServiceNow ticketing system.
  • Experience with Security Information and Event Management (SIEM) tools.
  • Broad understanding of IT operating systems (Windows, Unix, Linux), databases, and networking.
  • General knowledge of malware types and cyber-attack techniques (kill chain).
  • Experience with network security tools such as firewalls, IDS/IPS, and security tools for detecting and analyzing security events is a plus.

Qualifications:

• Proven experience in ICT security, including incident management and root cause analysis.
• Knowledge and experience in web security practices.
• Understanding of IT infrastructure and software development processes.

Soft Skills:

• Strong analytical and problem-solving skills.
• Ability to collaborate effectively with cross-functional teams.
• Excellent verbal and written communication skills.

Additional Information:

• Ability to follow and contribute to the development of security processes.
• Regular participation in team discussions, meetings, and scrum sessions.
• Proactive approach to identifying and resolving security issues