Cyber Security Engineer III

Role : Cyber Security Engineer (Tier 3) - Managed Services

Experience : 7+ years

Location : Objective :

The Cyber Security Engineer III is a senior-level position responsible for designing, implementing, and maintaining robust security solutions to protect our customers systems, networks, and data. This role will lead and execute complex security projects, provide technical guidance to junior team members, and collaborate with cross-functional teams to ensure the organization's security posture aligns with industry best practices. The Cyber Security Engineer III will leverage expertise in security technologiessuch as Splunk, Tenable, Nessus,CrowdStrike, Wiz, and Axoniusto proactively identify and mitigate potential security risks and incidents. This role also involves direct server-side mitigation of vulnerabilities, secure cloud configuration, and hands-on vulnerability lifecycle management using tools like Tenable and Wiz.

Key Responsibilities :

• Leads the design, implementation, and maintenance of enterprise-wide security solutions, including but not limited to firewalls, intrusion detection / prevention systems, SIEM, endpoint protection, and secure network architectures.
• Performs advanced threat modelling and vulnerability assessments to identify security gaps and recommends appropriate controls and countermeasures.
• Leads and executes vulnerability management initiatives, including scanning, triaging, prioritizing, and remediating vulnerabilities on server and cloud environments using platforms like Tenable, Nessus, and Wiz.
• Monitors and analyses security events and alerts from Splunk, Tenable, CrowdStrike, Nessus, Wiz, and Axonius to detect and respond to potential threats.
• Develops and implements security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
• Conducts in-depth security incident investigations, including root cause analysis, post-mortem reviews, and mitigation strategies.
• Performs penetration tests or coordinates red-team activities to simulate real-world attacks and identify exploitable vulnerabilities, using tools like Burp Suite, Nmap, Metasploit, OWASP ZAP, and others.
• Develops and maintains secure configuration standards for cloud environments (AWS, Azure, GCP); implements and enforces controls to protect cloud assets from misconfigurations.
• Collaborates with cross-functional teams to evaluate, select, and deploy new security technologies, tools, and services.
• Partners with DevOps and infrastructure teams to integrate security into CI / CD pipelines and cloud deployments.
• Develops and delivers security awareness and training programs to educate employees on security best practices and policies.
• Participates in security audits and compliance assessments, ensuring adherence to relevant frameworks and regulations.
• Stays abreast of the latest security trends, vulnerabilities, and industry developments and makes recommendations for enhancing the organization's security posture.

Additional Specific Duties and Responsibilities :

Required Experience & Qualifications :

(ref : hirist.tech)