Platform Security Engineer

Job Description

JD - Security Engineer - Platform security II Role summar yWe are looking for a talented, dedicated Security Engineer who thrives on securing complex environments and possesses deep and wide expertise in the security domain. This crucial role focuses on translating enterprise security policies into actionable technical controls, administering key security solutions, hardening core infrastructure (both on-premises and cloud), and providing essential support .Core Responsibilities :A. Infrastructure Security & Controls :Implement and Maintain security hardening adherence to CIS benchmarks in Linux & Windows Servers and Data Center Infrastructure .Administer advanced security solutions such as firewalls, IDS/IPS, XDR, DLP, email security, and DDoS protection in collaboration with Enterprise Infra and Network teams .Implement and maintain secure baselines for hypervisors, virtual machines, containers, Kubernetes, storage, and network segments .Implement and manage secret management solutions (Hashicorp vault, HSM) .Validate cloud infrastructure against CIS, NIST, PCI DSS, and organizational baselines .Collaborate in post-incident reviews, including cloud breach simulations, root cause analysis of cloud misconfigurations or vulnerabilities, and implement corrections .Leverage automation and tools to streamline security processes, such as configuration compliance checks and the discovery of shadow I T B. Network & Zero Trust Architectur e:Deploy and manage Zero Trust security frameworks to strengthen the organization?s security posture in complex environment s.Ensure appropriate network segmentation, Access Control Lists (ACLs), and VPNs for secure data transit and network integri tyConduct comprehensive security reviews to identify security gaps in network and data center architectur e.Propose and implement risk-based mitigation strategies for securing data centers and network infrastructur e.Provide security recommendations for designing, operating, and maintaining high-performing data centers and network s. Skills and Experien ce:5+ years of experience in Information security, with a focus on data center and network securi ty.Expertise in configuring and managing network security solutions, including firewalls, IPS, load balancers, and VP Ns.In-depth knowledge of server administration (Linux and Windows) with a dedicated focus on security best practices, hardening, and configuration manageme nt.Proven ability to administer, configure, and troubleshoot enterprise-grade XDR/EDR, DLP, and Email Security solutio ns.Deep knowledge of cryptographic technologies such as encryption, hashing, PKI, and digital signatur es.Hands-on experience with Zero Trust Network Architecture and related security framewor ks.Basic scripting and automation knowledge (Python, PowerShell, or Ansibl e).Compliance Strong knowledge of compliance and regulatory requirements such as ISO 27001, GDPR, and the ability to contribute to audit and reporting activiti es.Excellent communication and collaboration skills, with the ability to explain complex security risks and requirements clearly to both technical and business stakeholde rs.Qualificati on:Education: Bachelor?s degree in Computer Science, Information Security, or a relevant technical fie ld.Certifications: Relevant industry certifications such as CISM, CCNP Security, or equivalent highly desirab le.Advanced Compliance Expertise: Demonstrated expertise in frameworks such as ISO/IEC 27017, ISO 27018, SOC 2, and PCI DSS is highly desirab le.Experience scripting or automating security tas ks. We are looking for a highly proactive individual who enjoys tackling complex security challenges. Must be a strong collaborative team player committed to continuous learning, maintaining deep and wide expertise, and fostering a secure cult ure.