Position Overview
We are looking for an experienced Infrastructure Security Engineer to support and maintain the organization's Threat and Vulnerability Management program. The role focuses on identifying, analysing, monitoring, and mitigating security vulnerabilities across network, systems, and application environments.
The successful candidate will support security incident response, vulnerability assessments, threat intelligence analysis, and security reporting while ensuring timely remediation of identified vulnerabilities. The role also involves supporting NIS2 compliance activities and working closely with Cyber Defence Centre (CDC), Endpoint Detection and Response (EDR), and infrastructure security teams.
Key Responsibilities
1. Threat & Vulnerability Management
- Support and maintain vulnerability detection and mitigation activities in accordance with security best practices.
- Implement and support the Threat and Vulnerability Management program by applying information security practices and continuously improving its maturity.
- Identify, assess, analyse, and manage security vulnerabilities across network, systems, and application environments.
- Regularly track and manage the vulnerability lifecycle to ensure all identified findings are addressed and closed within agreed timelines.
- Investigate the latest security vulnerabilities, vendor advisories, security incidents, and penetration techniques.
- Participate in ongoing and future Vulnerability Management projects.
2. Security Incident Analysis & Threat Detection
- Participate in incident response triage and proactive analysis of information security vulnerabilities and threats.
- Analyse vulnerability feeds and support CDC operations with Indicators of Compromise (IOC) and Indicators of Attack (IOA), based on vendor advisories, security alerts, and the evolving threat landscape.
- Analyse and apply Common Vulnerability Scoring System (CVSS) mechanisms, including relevant vulnerability vectors and vector strings.
- Coordinate with CDC operations and EDR teams to communicate the latest threats and detection signatures.
- Support the creation of security use cases to monitor, detect, or block vulnerability exploitation.
- Notify relevant stakeholders of emerging vulnerabilities and potential security risks when appropriate.
3. Security Assessment & Reporting
- Conduct security assessments and provide recommendations for vulnerability remediation.
- Prepare regular security assessment reports highlighting identified security issues, risk levels, and recommended workarounds.
- Provide regular updates to stakeholders on vulnerability findings and remediation progress.
- Provide security assessments and consultation on firewall and network ELR.
- Maintain accurate records of vulnerability findings, security incidents, remediation activities, and assessment results.
4. NIS2 Compliance & Security Governance
- Demonstrate knowledge of the NIS2 framework, including its structure, functions, governance, management, communication, and reporting requirements.
- Support incident monitoring, security posture reviews, approval processes, and reporting services related to NIS2 compliance.
- Assist in ensuring security activities and reporting are aligned with applicable NIS2 requirements.
- Coordinate with relevant stakeholders to support security governance and compliance activities.
Requirements & Qualifications
- Minimum 2 years of relevant experience in Infrastructure Security, Cybersecurity, Vulnerability Management, or Information Security.
- Strong understanding of vulnerability detection, assessment, analysis, and mitigation.
- Hands-on experience supporting Threat and Vulnerability Management processes.
- Knowledge of security incident response, threat analysis, and vulnerability remediation.
- Understanding of IOC, IOA, security alerts, vendor advisories, and threat intelligence.
- Knowledge of CVSS scoring mechanisms and vulnerability assessment methodologies.
- Familiarity with CDC operations and EDR security solutions.
- Understanding of network security, firewall security, and infrastructure security assessments.
- Knowledge of the NIS2 framework and its compliance requirements.
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to prepare security assessment reports and communicate technical findings to stakeholders.
- Good communication skills and ability to work effectively within a team.
Good to Have
- Experience with automation and AI-related security solutions.
- Knowledge of data analytics and security data analysis.
- Experience in security reporting and dashboard preparation.
- Previous experience working with the NIS2 framework.
- Strong stakeholder communication and collaboration skills.
- Ability to work independently and as part of a global security operations team.
Working Conditions
Shift Rotation
- The candidate must be willing to work on rotational shifts covering APAC, EMEA, and US regions.
- Shift assignments and rotation frequency will depend on project and operational requirements.
- The resource may be assigned to different regional shifts either temporarily or permanently.