Principal Security Engineer

Bachelors/Masters degree in Computer Science, Information Technology, Cybersecurity, or a related field; advanced degree preferred.
Minimum of 5 years of experience in cybersecurity, with at least 2 years in a managerial role within a SOC environment.
Relevant certifications such as CISSP, CISM, or CEH are highly desirable.
Proficiency in security technologies (SIEM, intrusion detection systems, firewalls, etc.) and knowledge of security frameworks (NIST, ISO 27001).
Strong leadership and interpersonal skills, with the ability to inspire and mentor a team.
Excellent problem-solving and analytical skills, with a detail-oriented approach.
Strong verbal and written communication skills, capable of conveying complex security concepts to non-technical stakeholders.

Develop and implement security architecture strategies, ensuring alignment with corporate goals and compliance requirements.
Develop and implement robust IAM frameworks and architectures to manage user identities, access controls, and entitlements across the organization.
Develop and implement security architectures and best practices for cloud environments (AWS, Azure, Google Cloud, etc.) to ensure data protection and compliance.
Design and oversee the deployment of security solutions, including network security, application security, and cloud security.
Proactively search for indicators of compromise (IOCs) and potential threats within the network and systems.
Work closely with DevOps, IT, and development teams to integrate security into the software development lifecycle (SDLC) and cloud deployment processes.
Conduct in-depth analysis of malware samples to understand their behavior, functionality, and impact on systems.
Use reverse engineering techniques to dissect and analyze malware code, identifying vulnerabilities and potential indicators of compromise (IOCs).
Stay current with the latest cybersecurity trends and threats and recommend improvements to processes and technologies.
Provide guidance on security incidents and breaches, helping to develop response plans and recovery strategies.
Educate staff on security best practices and promote a culture of security awareness across the organization.