JOB PURPOSE STATEMENT
The Junior Security Engineer will support the Information Security team in protecting the organization’s information systems. This role involves monitoring security systems, identifying potential threats, and assisting in the implementation of security measures.
KEY DELIVERABLES:
| Key Performance Area: | Duties: |
| 1. Security Monitoring and Incident Response | · Monitor security alerts and perform initial analysis to identify potential security incidents.
· Assist in the investigation and documentation of security incidents and breaches. · Support the incident response team in mitigating threats and restoring normal operations. |
| 2. Vulnerability Management |
|
| 3. Security Tools and Systems Maintenance | · Assist in the configuration and maintenance of security tools such as firewalls, intrusion detection/prevention systems, and antivirus software.
· Ensure security tools and operating systems are up-to-date and functioning properly. |
| 4. Compliance and Audit Support | · Support the Information Security team in preparing for security audits and assessments.
· Help maintain documentation related to security policies, procedures, and compliance requirements. |
| 5. Security Awareness and Training | · Participate in the development and delivery of security awareness training programs for employees.
· Assist in creating educational materials and communications to promote security best practices. |
| 6. Documentation and Reporting | · Maintain accurate and detailed documentation of security incidents, vulnerabilities, and remediation actions.
· Prepare reports on security activities and metrics for management review. |
JOB REQUIREMENTS:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Basic certifications in cybersecurity such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or equivalent.
- Willingness to pursue and obtain additional relevant certifications as directed.
- Basic understanding of security infrastructure design and implementation concepts.
- Familiarity with security policies, procedures, and standards.
- Knowledge of risk assessment methodologies and techniques.
- Basic understanding of incident response procedures and investigation techniques.