Senior Infrastructure Security Engineer

As a Senior Infrastructure Security Engineer at an Electronic Manufacturing Company, we are working with, your role would involve designing, implementing, and maintaining security measures to protect the company's infrastructure and assets. You would be responsible for ensuring the confidentiality, integrity, and availability of their systems and data. Here is a comprehensive job description for the role:
Responsibilities:

1. Develop and implement security policies, standards, and procedures for the company's infrastructure.
2. Design, configure, and maintain security systems, including firewalls, intrusion detection systems, and network access controls.
3. Conduct regular vulnerability assessments and penetration tests to identify security weaknesses and propose remediation strategies.
4. Monitor and investigate security incidents, respond to security breaches, and implement appropriate incident response procedures.
5. Collaborate with cross-functional teams to ensure security requirements are integrated into infrastructure projects and system deployments.
6. Conduct security audits and risk assessments to identify areas of improvement and develop mitigation plans.
7. Provide guidance and mentorship to junior security engineers and IT staff on security best practices.
8. Participate in incident response and disaster recovery planning and testing.
9. Ensure compliance with relevant regulatory requirements and industry standards (e.g., PCI DSS, HIPAA, GDPR).

Qualifications:

1. Bachelor's degree in Computer Science, Information Security, or a related field. A Master's degree is preferred.
2. Strong experience (typically 5+ years) in infrastructure security, including network security, system hardening, vulnerability management, and incident response.
3. In-depth knowledge of security technologies, such as firewalls, intrusion detection/prevention systems, SIEM, endpoint protection, and secure remote access.
4. Proficiency in performing security assessments, penetration testing, and vulnerability scanning.
5. Familiarity with cloud security principles and technologies (e.g., AWS, Azure, Google Cloud Platform).
6. Hands-on experience with network protocols, routing, and switching.
7. Knowledge of encryption techniques, secure coding practices, and secure system architecture.
8. Understanding of regulatory compliance requirements and industry standards (e.g., PCI DSS, HIPAA, GDPR).
9. Professional certifications such as CISSP, CISM, or GIAC are highly desirable.
10. Strong analytical and problem-solving skills, with the ability to think critically and assess risks effectively.
11. Excellent communication skills, both written and verbal, to effectively communicate complex security concepts to technical and non-technical stakeholders.