Position: Security Engineer
Company: InCountry.com
Experience required: 3y
Category: Security
English level: intermediate
Published: 2022-02-01T00:00:00+02:00

Trust and Security Mission

To ensure security at all levels and in all processes and products of InCountry in compliance with our IS policy and related standards and procedures.

About the Role

Reporting to the Operations Security Team Lead, the Operations Security Engineer is a key member of the Operations Security Team. As an Operations Security Engineer, you will be responsible for enhancing, monitoring, and improving our security and privacy posture.



Responsibilities

Ensure our technical security controls are appropriately managed through their lifecycle to reach their maximum effectiveness
Maintain and improve logging and security monitoring infrastructure
Conduct systems testing to ensure that critical vulnerabilities become identified
Identify, patch, and/or remediate security vulnerabilities
Take part in security incident response planning, training, and operations to ensure InCountry is adequately resilient to cyber threats
Work with the Trust & Security team on big initiatives, support compliance, and audit efforts
Collaborate with Operations and Engineering teams to secure new projects and releases
Participate in industry cyber threat intelligence sharing initiatives
Manage penetration testing of both applications and infrastructure
Perform susceptibility scans and manage the resolution of threats
Assess Software as a Service (SaaS) products for security compliance
Manage security applications, such as Hashicorp Vault, Splunk, etc.
Conduct periodic user access control verifications
Install required security patches and updates for a wide range of applications
Monitor system security relating to resilience, malware intrusion, and patching
Assess technical controls and identify areas of improvement
Serve as a technical security lead for large complex projects that involve cross-functional teams


Experience

You have hands-on Linux experience
You have correlated logs (in a SIEM, in other monitoring tools) experience
You have experience with security incident prevention and response
You possess communication and cross-team collaboration skillsYou have the capability in anti-virus software, interruption recognition, firewalls, and content filters
You know threat assessment tools, skills, and procedures
Proficiency in planning secure networks, computer systems, and application architectures
The system management, assisting several platforms and applications