Senior Security Engineer

About Us

Ackcent Cybersecurity aims to enhance customer security, protect assets from cyber threats, and provide high-quality services through effective communication and customer care.

We are seeking professionals with extensive experience in cybersecurity and a deep understanding of networks, security architecture, and monitoring tools.

This role involves leading the handling of security threats and incidents, improving and maintaining tools and procedures, conducting forensics and malware analysis, and training junior team members.

Key Responsibilities:

• Analysis and verification of security threat monitoring alerts to produce incident identification, classification, and prioritization.
• Creation, improvement, and maintenance of security monitoring alerts based on correlation of different sources of data.
• Operation and maintenance of various IDS/IPS, working closely with security/network architects to enhance security monitoring and defenses.
• Leadership in responding to security incidents and investigations, collaborating with customers and IT providers while adhering to SLA requirements.
• Conducting forensics/malware analysis to extract indicators of compromise for further mitigation and containment, evaluating incident scope and impact.
• Reporting to the SOC Manager and the involved CISO/CIO.
• Advising and training junior team members.
• Proactive monitoring of the cyber threat landscape by researching and studying the latest security threats and vulnerabilities to ensure operational tools and processes are up-to-date.
• Ensuring contractual obligations are met and SLAs are met or exceeded.
• Managing priorities, deadlines, and deliveries.
• Managing and creating improvements and procedures regarding SOC Tools and Operations.

Required Skills & Experience:

• Computer/Telecommunications Engineering degree or a related discipline.
• More than 3 years of relevant experience in the field of information security.
• Experience working in a Security Operations Centre (SOC) environment.
• Strong technical understanding of network fundamentals and common Internet protocols.
• Knowledge of system administration and security architecture.
• Knowledge of main security monitoring tools (FW, IDS/IPS, HIDS, WAF, SIEM).
• Experience or proven knowledge of at least one IDS technology.
• Scripting in Bash, Python, or PowerShell.
• Fluent in English (written and spoken).
• Self-motivated with the ability to work independently and as a team member in a challenging environment.

Nice to Have:

• Proficient in understanding Operating Systems and their architecture: Windows, Unix/Linux, and OSX Operating Systems.
• Windows server administration knowledge.
• Good understanding of Cyber security landscape: Cyber kill chain, TTP, Threat Intelligence, and malware distribution networks.
• Good understanding of information security concepts: defense in depth, BYOD management, data loss protection, risk assessment, and security metrics.
• Three or more years working in a Security Operations Center (SOC) environment.
• Strong analytical and problem-solving skills.
• Strong communication, presentation, and leadership skills along with the ability to work in a highly collaborative environment.
• Exhibits initiative, follow-up, and follow-through with commitments.
• Manages multiple priorities in a high-pressure environment.
• Experience working with AWS or Azure infrastructure.
• Previous experience with malware reverse engineering.
• Related Certification (GCIH, GCFA, GCFE, GREM, CISSP) is a plus.

What We Offer:

• Competitive salary
• Medical insurance
• Remote work
• Birthday day off
• Flexible working hours
• A dynamic work environment where innovation and collaboration are at the core