IT Security Engineer

About the Role

We are looking for a skilled IT SecurityEngineer to join our team and help protect our clients’ IT environmentsfrom cyber threats. The role will focus on cybersecurity initiatives, includingvulnerability assessments, incident response, and security posture management.If you’re passionate about cybersecurity and looking to advance your careerwith an innovative and growing company, we want to hear from you!

Key Responsibilities

• Conduct vulnerability assessments, risk analysis, and provide recommendations for improving security measures.
• Lead the investigation, containment, and remediation of security incidents (both internal and client-facing).
• Work within Security Operations Center (SOC) and Network Operations Center (NOC) teams to monitor and respond to threats.
• Perform penetration testing and forensic investigations to identify security gaps and threats.
• Manage and configure firewalls, endpoint protection, and other security technologies.
• Ensure compliance with security standards, policies, and frameworks (e.g., ISO 27001, NIST).
• Collaborate with clients to provide security advice, best practices, and incident prevention strategies.
• Continuously monitor security events and alerts, conducting root cause analysis as required.

  Technical Skills & Experience

  • Minimum 2 years’ experience in a cybersecurity or IT security role.
  • Proficiency with the following security tools and concepts:
  • Vulnerability scanning tools (e.g., Nessus, Qualys)
  • Penetration testing methodologies and tools (e.g., Kali Linux, Metasploit)
  • Firewall management (both hardware and software)
  • Endpoint protection solutions (e.g., CrowdStrike, Carbon Black, Sophos)
  • Security Information and Event Management (SIEM) systems (e.g., Splunk, SolarWinds)
  • Cloud security (Microsoft 365 Security, Azure AD, etc.)
  • Hands-on experience in:
  • Incident response and remediation
  • Digital forensics and post-incident analysis
  • Security posture management (e.g., configuration hardening, patch management)
  • Security monitoring and threat hunting

Certifications (Highly Preferred)

• EC-Council CEH (Certified Ethical Hacker) or CHFI (Certified Hacking Forensic Investigator)
• CompTIA Security+ or Advanced Security+
• Cisco Certified CyberOps Associate or Professional
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (Microsoft 365 Security)
• Any relevant certifications in cybersecurity

Key Attributes We Look for in You

• Problem-solving skills: Ability to think critically, analyze complex security issues, and offer clear, actionable solutions.
• Strong communication: Excellent written and verbal communication skills, particularly for explaining security concepts to non-technical stakeholders.
• Team-oriented: A positive, collaborative attitude and a proactive approach to security.
• Integrity: Handles sensitive information with discretion and upholds high standards of confidentiality and security.
• Continuous learning: Eagerness to stay current with the latest trends, vulnerabilities, and tools in cybersecurity.
  
  Location:Preferably near Wellawatte, Sri Lanka (Hybrid – 2-3 days onsite)
  Employment Type: Full-time (1-year contract with 6-month probation,potential for permanent placement)

What We Offer

• Attractive salary package (including superannuation) with guaranteed bonuses.
• Performance-based salary reviews after probation period.
• Career growth opportunities: Training, certification support, and a clear pathway to more senior engineering and consulting roles.
• Work in a dynamic, growing team: Be part of a rapidly expanding ISO-certified Australian IT Solutions provider.
• Flexible working arrangement: Hybrid role with a mix of remote work and office presence.

If you are ready to grow your career in ITsupport and security, apply now and join a company that values your skills anddevelopment.