Senior Cybersecurity Engineer

Job Summary

As a Senior Cybersecurity Engineer, you will play a critical role in protecting GAHR's infrastructure against cyber threats. You will design, implement, and monitor security measures, respond to incidents, and provide strategic recommendations to enhance our security posture. This position requires a deep understanding of security best practices, advanced problem-solving skills, and the ability to work collaboratively across teams.

Key Responsibilities

• Security Architecture & Design: Develop and implement secure architecture designs to protect systems and data across the organization.
• Threat Mitigation: Identify vulnerabilities and implement security solutions to mitigate risks and prevent breaches.
• Incident Response: Lead and coordinate responses to security incidents, including investigation, containment, and recovery efforts.
• Monitoring & Analysis: Oversee the implementation and management of intrusion detection/prevention systems (IDS/IPS), SIEM solutions, and other monitoring tools to detect and respond to potential threats.
• Compliance & Risk Management: Ensure compliance with relevant security standards, frameworks (e.g., ISO 27001, NIST, GDPR), and industry regulations.
• Penetration Testing & Vulnerability Assessments: Conduct regular assessments and audits to identify security gaps and recommend improvements.
• Collaboration & Training: Work with cross-functional teams to ensure employee training on cybersecurity risks, and foster a culture of security awareness.
• Documentation & Reporting: Maintain detailed documentation of security policies, incidents, and procedures. Provide regular reports to leadership on the organization’s security posture.

Qualifications

Education & Experience:

• Prefer a Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• Minimum 1-2 years as a Network Engineer or Systems Administrator combined with 4-5 years of experience in cybersecurity, including 2 years in a senior or lead role.

Skills & Expertise:

• Extensive knowledge of cybersecurity frameworks, best practices, and protocols.
• Proficiency with tools like firewalls, IDS/IPS, SIEM platforms, endpoint protection, and vulnerability scanning tools.
• Strong understanding of network protocols, cloud security, encryption standards, and identity and access management (IAM).
• Hands-on experience with penetration testing, ethical hacking, and secure coding practices.
• Familiarity with regulatory compliance requirements (e.g., PCI DSS, HIPAA, GDPR, SOC 2).
• Strong problem-solving and analytical skills with the ability to think strategically and act tactically.
• Experience working with cloud platforms such as AWS, Azure, or Google Cloud is a plus.

Certifications:

• CASP , CISSP, CISM, CEH, or similar certifications are highly preferred.
• Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer) are a plus.