Cyber Security Engineer

To design, implement, and maintain robust cybersecurity and information security frameworks that protect Sol-Millennium s global digital infrastructure and sensitive data assets. The position plays a critical role in enabling secure digital transformation, maintaining compliance with international data protection regulations, and protecting the trust of customers and stakeholders through proactive threat management and governance.

• Develop, enforce, and maintain information security policies, standards, and controls aligned with industry best practices (e.g., NIST, ISO 27001).
• Identify, evaluate, and remediate system and application vulnerabilities, prioritizing the resolution of known opportunities.
• Configure and maintain core security infrastructure, including firewalls, SIEM, IDS/IPS, endpoint protection, and identity access controls.
• Monitor threat intelligence feeds and respond to real-time threats; support the implementation of a 24/7 Security Operations Center (SOC) or SIEM platform.
• Conduct risk assessments, security audits, and compliance reviews across cloud, on-premises, and hybrid environments.
• Ensure adherence to international security and privacy regulations such as GDPR, HIPAA, and other applicable regional standards.
• Lead phishing simulation exercises and drive end-user cybersecurity awareness programs.
• Collaborate with DevOps and IT teams to embed security controls into CI/CD pipelines (DevSecOps).
• Support compliance audits and maintain regulatory remediation tracking.
• Identify and mitigate risks related to:
• Legacy systems and misconfigurations, which expose critical attack surfaces.
• Delayed breach detection, which can significantly increase operational and reputational impact.
• Unpatched known vulnerabilities, which leave extended exposure windows for attackers.
• Outdated software components, often exploited in ransomware attacks across endpoints and servers.
• Database vulnerabilities, ensuring proper hardening and access control.
• Third-party SaaS platforms, enforcing secure configurations and vendor risk management.
• Evaluate third-party vendors for alignment with internal data security and privacy standards.
• Develop and operationalize incident response know how. Coordinate the design or vendor selection of a 24/7 Security Operations Center and SIEM platform.
• Lead remedy efforts for legacy applications and infrastructure with a focus on misconfigurations and technical debt reduction
• Establish and report on key security metrics, phishing simulation failure rates, and policy audit results
• Assess and monitor third-party platforms and SaaS tools for security risks, and enforce secure vendor onboarding standards

Essential tools hands on,

1. Qualys/Nessus/Rapid7
2. Microsoft Sentinel
3. Metasploit Framework/Burp Suite/Nmap
4. Microsoft Defender for Endpoint
5. Wireshark
6. Azure Active Directory/Ping Identity
7. Microsoft Defender for Cloud
8. Microsoft Purview Compliance Manager
9. Microsoft Threat Intelligence
10. Microsoft Defender XDR

Qualifications:

• Minimum 5 years of experience in both Information Security and Cybersecurity roles
• Hands-on experience with SIEM tools, endpoint protection, firewalls, and network security
• Solid understanding of security governance, data classification, IAM, and compliance frameworks
• Demonstrated ability to handle incident response and lead vulnerability remediation efforts