Security Engineer  

1. Carry out Red Team (offensive security) activities such as penetration testing, vulnerability assessments, exploitation, and red team simulations to proactively identify weaknesses in applications, infrastructure, and cloud environments.

2. Perform Blue Team (defensive security) tasks including continuous monitoring of systems and networks, analyzing alerts from SIEM/IDS/IPS/EDR, and leading security incident detection and response.

3. Develop and fine-tune detection rules, correlation logic, and automation scripts to improve proactive defense and reduce response time.

4. Research latest attack techniques, exploits, and defense mechanisms to stay ahead of evolving cyber threats.

5. Collaborate with cross-functional teams (SOC, DevOps, IT, Engineering) to embed security across the SDLC and infrastructure.

6. Document findings, prepare reports, and provide clear remediation guidance for both technical and non-technical stakeholders.

1. Min. Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience).

2. Min. 1 years of experience in cyber security, with exposure to both offensive and defensive practices.

3. Strong knowledge of penetration testing frameworks (Metasploit, Burp Suite, Kali Linux, Nmap, OWASP ZAP).

4. Hands-on experience with defensive tools: SIEM (QRadar, FortiSIEM), IDS/IPS, EDR (CrowdStrike, Sophos), Firewalls, and WAF.

5. Solid understanding of security frameworks and methodologies (MITRE ATT&CK, OWASP Top 10, NIST, ISO 27001).

6. Having Certified Ethical Hacker (CEH) Certification is a plus.