Position: Security Engineer
Category: Security
English level: upper
Years of experience: 7


Coordinates the continuous development, implementation and updating of security and privacy policies, standards, guidelines
. Developing security awareness program for employees.
.Took part into Privacy-related projects / initiative (e.g., Privacy / GDPR Compliance Program related initiatives, Privacy Audits).
.Implementation and support Microsoft Intune for mobile device management.
.Implementation and support vulnerability scanning into application development lifecycle (SAST / DAST / SCA)
.Hardening existing Cloud infrastructure (AWS,Azure)
.Continuous scanning, prioritization, and reporting of vulnerabilities throughout on-premise and cloud-based environments across both enterprise and service provider networks
•Implementation and ongoing maintenance of vulnerability scanning solutions, including security agents deployed on endpoints across the enterprise.
•Collaborate with IT groups on monthly patching, non-patch vulnerability remediation, vulnerability exception review
•Perform formal penetration tests, pinpoint methods that attackers could use to exploit weaknesses.
•Collection of intelligence using open-source intelligence (OSINT), social media intelligence (SOCINT).
•Deliver technical reports and formal papers on test findings. 
•Hunt for and identify threat actors by analyzing and researching the techniques, tools, and processes used by threat actors
Developing and enhancing DLP controls to prevent unauthorized transmission of sensitive and proprietary data.
•Developing security awareness program for employees, train existing and new employees.
•Performing dynamic and static malware analysis, to understand and mitigate threats across all organization including networks and workstations.
•Supporting and monitoring security tools like IDS / IPS systems, firewalls, ELK stack, sysmon, ossec, etc.
•Threat hunting , malware analysis activities across the organization.
•Threat intelligence activities to discover threat actors which can harm organization and customers.
•Digital forensic activities including memory , logs and network analyses.