Sr. Security Test Engineer

Core Responsibilities

1. Design and Implement Security Systems On-Premise and Azure Cloud

Should be AZ 500 certified and should have experience with Azure

Develop security architectures for new systems.

Integrate security controls into software and hardware environments.

Set up firewalls, VPNs, intrusion detection systems (IDS), and intrusion

prevention systems (IPS).

2. Monitor and Respond to Threats

Use security tools to monitor network traffic for malicious activity.

Investigate security breaches and incidents.

Coordinate responses to attacks, including mitigation and forensic analysis.

3. Vulnerability Management

Regularly perform penetration tests and security assessments.

Identify vulnerabilities in systems and applications

Apply patches and fixes, and recommend security improvements.

4. Incident Response and Recovery

Lead incident response efforts.

Develop playbooks for handling various security incidents.

Ensure systems can recover quickly from attacks or breaches.

Policy and Compliance

5. Ensure Compliance with Standards

Implement and enforce security policies aligned with industry standards (e.g.,

SOC2, PCI and GDPR).

Conduct internal audits and participate in external compliance assessments.

6. Documentation and Reporting

Maintain detailed records of security configurations, risk assessments, and

incidents.

Create reports for IT leadership and auditors detailing security posture and

improvements.

Collaboration and Education

7. Collaborate with Cross-Functional Teams

Work closely with IT, DevOps, and software engineering teams to

embed security early (DevSecOps).

Review code and deployment pipelines for vulnerabilities.

8. Security Awareness and Training

Train employees on security best practices (e.g., phishing prevention).

Conduct drills or simulations to ensure incident response readiness.