Position: Security Engineer
Company: Faria Education Group
Category: Security
Experience required: 3y
English level: upper

Faria is a leader in international education systems & services offering an integrated systems suite across learning, admissions, school-to-home, and online courses & study services to over 10,000 schools and 4 million students in 155 countries. Faria’s multi-disciplinary team of over 300 operates globally across nine offices.

We are looking for an experienced **Security Engineer** to join the Faria DevOps Department with global security service functions. The role is responsible for the company’s security systems up and running; keeping sensitive data safe from breaches, taps, and leaks; securing client information, financial records, and other confidential information; assessing, testing security systems, and analysing risks.

**ABOUT THE ROLE**

- Identifying security measures to improve incident response
- Responding to security incidents
- Performing security assessments and code audits
- Automating security improvements
- Analysis, design, implementation, and maintenance of all layers of IAM applications, including Authorization/Authentication and Account Creation/Management/Provisioning in data repositories.
performs internal security audits and cybersecurity assessments of information services and solutions;
- Participates in the review and development of security requirements for information services, and the implementation of security solutions;
- Prepare detailed reports including assessment-based findings, outcomes, and propositions for further system security enhancement;
implement SAST and DAST tools CI/CD pipelines;
analyze, troubleshoot, and investigate security-related anomalies and incidents;
- On a regular basis perform internal vulnerabilities scanning of company IT systems
- Perform regular dark web monitoring
- Periodical review of firewall rules
- Monitor systems to detect anomaly behaviour
- Review access permissions
- Control and implement server/service security updates
- Review logs to detect suspicious behaviours and possible attacks
- Perform OSINT to check any possible leaks or sensitive data on the public internet

**ABOUT YOU**

- Work experience as an IT Security Engineer or other relevant position.
- Experience in the security awareness process for employees.
- Professional knowledge of standards on IT and security audits.
- Deep understanding of the architecture of IT infrastructure and information services.
- Excellent communication skills with the DevOps team, IT teams, application development teams, and corporate management.
- Proven skills in the development of policies, regulations, and procedures.
- Knowledge of information security best practices such as ISO 27000 series, GDPR, PCI-DSS, etc.
- Good familiarity with the latest security principles, techniques, and protocols.
- Deep knowledge of IAM software and systems and experience in IAM system implementation.
- Ability to produce detailed documentation and process flows around IAM.
- At least Upper-Intermediate level of English both spoken and written.
- Security-related certificates will be a plus.

**BENEFITS**

**Compensation:** Competitive salary and opportunities for career development.
**Healthcare:** Comprehensive medical, and COVID-19 coverage for you and your dependents.
**Vacation:** We support work/life balance and offer generous both paid Annual and Family leave.
**Wellbeing Resources:** Faria encourages team members to lead a healthy lifestyle and covers recurring monthly Health and Wellness benefits.
**Learning:** We encourage continued education and will help cover the cost of professional training, conferences, workshops, or certifications.
**Team:** Friendly atmosphere, group activities, and corporate events.
**Equipment:** Retina MacBook Pro or another laptop of your specification, peripherals, and displays included.