Sr. Security Test Engineer

Core Responsibilities

1. Design and Implement Security Systems – On-Premise and Azure Cloud

• Should be AZ 500 certified and should have experience with Azure

• Develop security architectures for new systems.

• Integrate security controls into software and hardware environments.

• Set up firewalls, VPNs, intrusion detection systems (IDS), and intrusion

prevention systems (IPS).

2. Monitor and Respond to Threats

• Use security tools to monitor network traffic for malicious activity.

• Investigate security breaches and incidents.

• Coordinate responses to attacks, including mitigation and forensic analysis.

3. Vulnerability Management

• Regularly perform penetration tests and security assessments.

• Identify vulnerabilities in systems and applications

• Apply patches and fixes, and recommend security improvements.

4. Incident Response and Recovery

• Lead incident response efforts.

• Develop playbooks for handling various security incidents.

• Ensure systems can recover quickly from attacks or breaches.

Policy and Compliance

5. Ensure Compliance with Standards

• Implement and enforce security policies aligned with industry standards (e.g.,

SOC2, PCI and GDPR).

• Conduct internal audits and participate in external compliance assessments.

6. Documentation and Reporting

• Maintain detailed records of security configurations, risk assessments, and

incidents.

• Create reports for IT leadership and auditors detailing security posture and

improvements.

Collaboration and Education

7. Collaborate with Cross-Functional Teams

• Work closely with IT, DevOps, and software engineering teams to

embed security early (DevSecOps).

• Review code and deployment pipelines for vulnerabilities.

8. Security Awareness and Training

• Train employees on security best practices (e.g., phishing prevention).

• Conduct drills or simulations to ensure incident response readiness.