Cyber Security Engineer  

Job Summary

The Security Engineer ensures that security is embedded into each phase of the system, application and infrastructure development and enhancement. Compliance and implementation of Information Security Policies and Standards together with the industry’s leading practices from SANS, NIST and CSC are incorporated when choosing solutions and designing and building applications and provisioning components in the Enterprise IT.

He/she is also responsible to ensure that applications, systems and infrastructure components are tested to identify vulnerabilities and that such are mitigated and managed prior Go Live. He/she will manage and support the review of the RFCs and will lead the meetings and discussions with the Technology and business teams to ensure that there is adequate context and support to realize the security requirements

He/she is responsible to ensure that all security reviews are completed within SLA and mitigating actions are completed within agreed timelines. This role will report to the Information Security Head of CIS Bayad Center Inc (CBCI). This role will also be working closely with MERALCO’s Security Engineering team.

Areas of Duties and Responsibilites:

• Ensure deliverables are completed within timelines and within expected quality
• Lead the identification of threats and cyber risks across changes in applications, systems and infrastructure
• Ensure that mitigating actions are feasible given resources and dependencies on hand
• Establish and implement KPIs in the various phases of security reviews
• Review the findings identified in the vulnerability assessment and penetration testing and ensure its closure within agreed timelines
• Adapt new controls and solution set for inclusion in current and future projects and change requests
• Provide support as needed relative to the design reviews, implementation and cyber testing
• Provide guidance/advise to the Technology teams on how to improve the current control set.
• Collaborate with other teams towards identification of new threats and risks and identify solutions on how to manage them

• Bachelors degree in Computer Science, Information Technology, or ECE
• Has 5 years of experience in IT Solutioning and IT Security
• With certification on ISC2 or Solution Specific training and certification is a must
• Has excellent communication skills
• Has good presentation skills
• Has experience in project management

Technical Competencies:

• Highly knowledgeable in IT Security domains – Network and Application
• Knowledgeable in Telecom Operations and Systems
• Knowledge in Project Management Knowledge Areas and Principles
• Knowledge on Application and Network Security and its vulnerabilities
• Knowledge in cloud technologies such as AWS, Azure