Position: Security Engineer
Company: Windmill Digital
Experience required: 3y
English level: upper

We’re growing quickly, so we are looking for people who are resilient, gritty, and up for a challenge. Come join our community and help us build a company that shines! 

We offer:
- Multinational experience
- Competitive salary and performance-based bonuses
- Flexible working hours
- Paid vacation and sick leaves
- PE accounting and support
- Remote work possibility
- Referral program
- Training programs allowance
- Health insurance
- Corporate English classes
- Team-building activities. 

Responsibilities:
- Identify weaknesses and potential threats to existing information security toolsets.
- Regular risk auditing and monitoring of systems to determine potential problems or security threats.
- Configure and troubleshoot security infrastructure devices.
- Support the business with a range of compliance implementation requirements.
- Provide and facilitate information security risk assessment process, reporting audits, manage governance .
- Prepare and document standard operating procedures and protocols.
- Develop best practices and security standards for the organization.
- Making Recommendations and identifying cost-effective solutions to cybersecurity problems.
- Develop best practices and security standards for the organization.
- Keep up to date with the latest thinking on secure coding and cyber-security issues.

Key Skills:
- Network administration skills to test internal systems such as firewalls and IPS/IDS devices to ensure networks are safe.
- Standards related to implementing a risk management framework including COBIT, ITIL, ISO27001/2 and NIST and SOC2
- Previous exposure to Windows and/or MacOs operating systems and programming languages, including.
- Encryption technologies, ethical hacking and penetration testing.
- Compliance skills in relation to key legislations such as the Health Insurance Portability & accountability Act (HIPAA), The Sarbanes-Oxley (SOX) Act of 2002, Payment Card Industry (PCI), General Data Protection Regulation. 

Soft Skills:
- Ability to work as part of a team but also independently and on own initiative.
- Flexible approach to tasks that may change daily.
- Analytical ability to break down problems into constituent parts.
- Solid communication skills and expertise to translate technical jargon into business familiar lang.


Qualifications:
- A bachelor degree in computer science, cyber-security or a related field
- Certified Information Systems Security Professional (CISSP) accreditation and/or CISA is desirable.
- Any one of the following certifications will be a definite plus.
SSCP, CRISC, QIAL, ISO27001 (auditor or implementer), OSCP, Security+ and CSA+.

Relevant Experience:
- Three to five years experience of working on security projects for major organizations is desirable.
- Proven ability to audit an IT environment and provide security and process recommendations.
- Proficiency in compliance implementation and management.
- In-depth knowledge of data protection regulations and technology supporting fraud detection.
- The individual should have experience in security assessment, cloud architecture, application threat modelling, policy writing
- If you’ve got the skills and experience and want to join our international team, please send your CV immediately!

For more information, please check the company website at https://www.windmill.digital/