Junior Cyber Security Engineer

• Threat Intelligence and Analysis: Identify, assess, and stay current on emerging threats and attack techniques to enhance our defensive strategies.

• Supporting Security Incident Analysis and Response:  Support, investigate and analyze security incidents to determine the root cause, scope, and impact.

• Penetration Test Management: Assist in the planning, coordination, report writing and management of penetration testing activities to proactively identify and remediate security weaknesses.

• Vulnerability Management: Participate in vulnerability scanning and assessment activities to identify weaknesses in our systems and applications. Assist in tracking and reporting on the remediation of identified vulnerabilities.

• IT Security Dashboards: Maintain IT security dashboards to provide a clear and concise overview of our security posture and key metrics for stakeholders.

• Security Tool Administration: Support the deployment, configuration, and maintenance of security tools and technologies.

• Policy and Procedure Adherence: Help to ensure compliance with company security policies and procedures.

• Fundamental understanding of networking concepts (e.g., TCP/IP, DNS, DHCP, routing, and switching).

• Basic knowledge of operating systems (Windows, Linux).

• Familiarity with common cybersecurity principles and best practices.

• Knowledge of common web application vulnerabilities, such as the OWASP Top 10.

• Exposure to security testing tools, such as but not limited to Burp suite, Nmap, Wireshark, Metasploit and Vulnerability scanners.

• Strong analytical and problem-solving skills with a keen attention to detail.

• Excellent written and verbal communication skills.

• Ability to work effectively both independently and as part of a team.

• A strong desire to learn and develop a career in cybersecurity.

• Resourceful, flexible and capable of collaborating with multi-cultural environment

• Available for travel for onsite support and training

Preferred Qualifications:

• Relevant industry certifications such as CompTIA Security+, CompTIA Network+, or (ISC)² Associate.

• Experience with a scripting language (e.g., Python, PowerShell).

• Familiarity with cloud security concepts (Azure, or Google Cloud).

• Knowledge of common attack vectors and mitigation techniques.

• Experience with security information and event management (SIEM) tools.