Job Description
Sago is seeking a Security Engineer with cloud experience to join our growing InfoSec team. This role will focus on securing our cloud infrastructure and supporting threat detection and mitigation efforts. They will be working closely with other teams to help with the design and implementation of security policies and procedures across our infrastructure.
Requirements
- Develop, implement, and maintain security tools such as SIEM systems, endpoint protection solutions, and vulnerability scanners.
- Configure and fine-tune detection rules, alerts, and automated response workflows.
- Support incident response efforts, including investigation, containment, eradication, and recovery.
- Collaborate with IT, Compliance, and other stakeholders to enforce and improve security standards.
- Monitor system and application logs to identify and investigate anomalies or suspicious activities.
- Perform regular vulnerability assessments and coordinate remediation efforts with relevant teams.
- Design, implement, and maintain cloud security controls across platforms like AWS and Azure.
Requirements
- 35 years of experience in security engineering or a related technical security role.
- Strong expertise in cloud platforms (Azure or AWS), including native security services.
- Solid understanding of identity and access management (IAM), including role-based access control and the principle of least privilege.
- Hands-on experience with endpoint security hardening and protection strategies.
- Familiarity with security frameworks and standards such as NIST, ISO 27001, and Zero Trust architecture.
- Proficiency with SIEM platforms (e.g., Splunk, CrowdStrike, Log360).
- Working knowledge of scripting or automation using PowerShell, Bash, or Python.
Benefits
- Free Gourmet Tea/Coffee on the house.
- Extensive Mediclaim Benefit
Qualification
Bachelor's Degree
Key skill Required
- Architecture
- Python
- AWS
- Automation
- Azure
- PowerShell
- Access Control
- Access Management
- Bash
- Cloud Infrastructure
- Cloud Security
- Compliance
- Design
- Design and Implementation
- Hardening
- Implementation
- Incident Response
- Infrastructure
- Investigation
- Management
- Policies and Procedures
- Remediation
- Security
- Security Engineering
- Security Services
- Threat Detection
