Infrastructure Cybersecurity Engineer

About the role

As an Infrastructure Cybersecurity Engineer, you will be embedded in the Infrastructure division as the subject matter expert for all cybersecurity matters. You will safeguard the organisation's enterprise IT infrastructure against threats and vulnerabilities, advise the infrastructure team on security guidance, standards and best practices, and protect sensitive data and assets across network, application, system and cloud environments. Offensive security and penetration testing expertise is applied proactively to find and fix weaknesses.

Key responsibilities

• Serve as the cybersecurity SME, advising infrastructure teams on security decisions, designs and operations
• Design and implement secure architecture, including network segmentation, secure configurations and access controls
• Conduct and coordinate penetration testing and vulnerability assessments, turning findings into remediation plans
• Identify, assess and remediate vulnerabilities on servers, network devices and cloud services
• Implement and manage security monitoring tools such as IDS and SIEM solutions
• Manage user access and privileges, enforce strong authentication and least privilege
• Ensure compliance with standards such as CIS benchmarks, NIST and ISO 27001
• Participate in incident response for infrastructure security incidents
• Manage firewalls, endpoint protection, encryption and cloud security on public cloud platforms
• Promote security awareness among IT teams and stakeholders

Required profile

• Minimum 2 years of experience in a security engineering role focused on infrastructure, network or systems security
• OSCP certification required
• Hands-on experience in network or infrastructure penetration testing, including scoping, execution and reporting
• Proven ability to act as a cybersecurity SME and explain complex security concepts to non-technical stakeholders
• Additional certifications such as CISSP, CEH, CISM or CCSP are an advantage

Required skills

• Network, system, cloud and infrastructure security best practices
• Firewalls, IPS, VPNs, endpoint security and encryption
• SIEM, vulnerability scanners and penetration testing tools (Metasploit, Nmap, Burp Suite)
• Risk assessment and management
• Security frameworks: ISO 27001, NIST, CIS benchmarks
• Public cloud: AWS, Azure or Google Cloud

What we offer

• A total rewards package with leave benefits and employee wellness programmes
• Flexible work arrangements (subject to the role)