About the role

Senior Cybersecurity Engineer tasked with cybersecurity architecture and solutioning. Engaging with cross-disciplinary teams and addressing security challenges in cloud and on-premises environments.

Responsibilities

Serves as the subject matter expert (SME) on Cybersecurity matters.
Conduct comprehensive Threat Risk Assessments across applications, cloud infrastructure, and enterprise systems.
Perform Threat Modelling using structured methodologies (e.g., STRIDE), with strong integration of MITRE ATT&CK.
Lead and influence multi-disciplinary teams in implementing and operating cyber security controls for cloud and on-premises environment; micro-services, containers, applications, operating systems, databases, and networks.
Provide recommendations for the configuration and improvement of security detection and response tools (e.g. SIEM, VA, NDR, XDR, EDR, etc) to enhance operational effectiveness.
Evaluates new technologies and validate the security of the technology including lab setup and proof of concepts (PoC).
Specify and write technical security clauses within project tender specifications.
Analyse, document and present security findings and recommendations to stakeholders.
Collaborate with government agencies to define security requirements and work closely with industry partners to implement functional capabilities.
Ensure adherence to secure software development lifecycle practices, maintaining high coding standards and delivering high-quality products.

5 years’ experience in cybersecurity domain.
Experience in management, deployment and maintenance of security infrastructure.
Experience in managing contractors and working in cross functional teams.
Experience in conducting security assessments, including threat modelling, vulnerability assessments, and penetration testing.
Maintaining current knowledge on cybersecurity tools, technologies and standards (e.g., OWASP and MITRE ATT&CK).
Possess good communication skills and interpersonal skills.
Motivated and self-directed. Clear and logical thinking.
Demonstrate strong technical foundation and willingness to learn new technology and approaches.
Possessing these skills and qualities can be advantageous:
Experience with modern IT approaches such as DevOps, Software Defined Network & Platform, Infrastructure as Code, Commercial cloud services and zero trust network.
Possess security certifications such as OSCP, CISSP, AWS or any cloud service security specialty is an added advantage.
Knowledge in applied cryptography, including cryptographic primitives, post-quantum cryptography, security protocols, and network security protocols (e.g., TLS, IPSec).
Familiarity with public key infrastructure (PKI), key management, hardware security modules (HSMs), and smart card technologies.