Cybersecurity Engineer

Summary

OVA.Work is seeking a highly skilled Cybersecurity Engineer to protect an organization's systems, networks, applications, and data from cyber threats. The role involves designing, implementing, monitoring, and maintaining security solutions while ensuring compliance with security standards and regulatory requirements.

Responsibilities

• Design and implement enterprise security architectures and controls
• Monitor networks and systems for security incidents
• Perform vulnerability assessments and penetration testing
• Investigate and respond to cybersecurity incidents
• Implement Identity and Access Management (IAM) solutions
• Configure and manage firewalls, IDS/IPS, VPNs, and endpoint security
• Conduct security risk assessments and recommend mitigation strategies
• Perform security audits and ensure compliance with industry standards
• Secure cloud infrastructure (AWS, Azure, GCP)
• Develop and maintain security policies, procedures, and documentation
• Collaborate with IT, DevOps, and development teams to integrate security best practices
• Automate security monitoring and incident response where possible

Skills

• Network Security
• Information Security
• Application Security
• Endpoint Security
• Cloud Security
• Identity & Access Management (IAM)
• Zero Trust Architecture
• Security Operations (SecOps)
• Risk Assessment
• Threat Modeling
• Firewalls
• VPN
• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS)
• Web Application Firewall (WAF)
• Proxy Servers
• Network Access Control (NAC)
• TCP/IP
• DNS
• DHCP
• Routing & Switching
• Wireshark
• Nessus
• Burp Suite
• Metasploit
• Nmap
• Splunk
• Microsoft Sentinel
• IBM QRadar
• CrowdStrike Falcon
• Microsoft Defender
• Palo Alto Networks
• Fortinet
• Qualys
• AWS Security Services
• Microsoft Azure Security
• Google Cloud Security
• IAM
• Security Groups
• Key Management Services (KMS)
• Cloud Security Posture Management (CSPM)
• Cloud Workload Protection
• Windows Server
• Linux (Ubuntu, Red Hat, CentOS)
• MacOS (basic administration)
• Python
• PowerShell
• Bash
• JavaScript (basic)
• SQL
• ISO 27001
• NIST Cybersecurity Framework
• CIS Controls
• SOC 2
• PCI DSS
• HIPAA
• GDPR
• Git
• Jenkins
• Docker
• Kubernetes
• Terraform
• CI/CD Security
• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• Software Composition Analysis (SCA)
• Threat Detection
• Malware Analysis
• Digital Forensics
• Log Analysis
• SIEM Monitoring
• Root Cause Analysis
• Disaster Recovery
• Business Continuity
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
• 3–8+ years of experience in cybersecurity or information security
• Hands-on experience securing enterprise environments and cloud infrastructure
• Knowledge of secure software development practices
• Experience working in SOC (Security Operations Center) environments is a plus
• CompTIA Security+
• CompTIA CySA+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• GIAC Security Essentials (GSEC)
• Offensive Security Certified Professional (OSCP)
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Certified Security – Specialty
• Google Professional Cloud Security Engineer

Qualifications

Must Haves

• Network Security
• Information Security
• Application Security
• Endpoint Security
• Cloud Security
• Identity & Access Management (IAM)
• Zero Trust Architecture
• Security Operations (SecOps)
• Risk Assessment
• Threat Modeling
• Firewalls
• VPN
• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS)
• Web Application Firewall (WAF)
• Proxy Servers
• Network Access Control (NAC)
• TCP/IP
• DNS
• DHCP
• Routing & Switching
• Wireshark
• Nessus
• Burp Suite
• Metasploit
• Nmap
• Splunk
• Microsoft Sentinel
• IBM QRadar
• CrowdStrike Falcon
• Microsoft Defender
• Palo Alto Networks
• Fortinet
• Qualys
• AWS Security Services
• Microsoft Azure Security
• Google Cloud Security
• IAM
• Security Groups
• Key Management Services (KMS)
• Cloud Security Posture Management (CSPM)
• Cloud Workload Protection
• Windows Server
• Linux (Ubuntu, Red Hat, CentOS)
• macOS (basic administration)
• Python
• PowerShell
• Bash
• JavaScript (basic)
• SQL
• ISO 27001
• NIST Cybersecurity Framework
• CIS Controls
• SOC 2
• PCI DSS
• HIPAA
• GDPR
• Git
• Jenkins
• Docker
• Kubernetes
• Terraform
• CI/CD Security
• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• Software Composition Analysis (SCA)
• Threat Detection
• Malware Analysis
• Digital Forensics
• Log Analysis
• SIEM Monitoring
• Root Cause Analysis
• Disaster Recovery
• Business Continuity

Nice to Haves

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
• 3–8+ years of experience in cybersecurity or information security
• Hands-on experience securing enterprise environments and cloud infrastructure
• Knowledge of secure software development practices
• Experience working in SOC (Security Operations Center) environments is a plus
• CompTIA Security+
• CompTIA CySA+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• GIAC Security Essentials (GSEC)
• Offensive Security Certified Professional (OSCP)
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Certified Security – Specialty
• Google Professional Cloud Security Engineer