About the Role
The Cyber Security Engineer safeguards the organization’s information assets by maintaining the confidentiality, integrity, and availability of critical data. This role involves implementing security measures, conducting assessments, mitigating vulnerabilities, and responding to incidents, while collaborating with cross-functional teams to fortify systems against cyber threats.
Responsibilities
- Analyze and identify information security risks and vulnerabilities in collaboration with the Information Security head.
- Propose, design, and implement relevant security changes.
- Analyze regulatory security requirements across GCC.
- Play a core role in the security design and acceptance of new infrastructure and platform initiatives.
- Perform regular internal and external vulnerability scans and advise the DevOps Team on priorities.
- Organize regular internal and external penetration tests.
- Support Technology teams in security audits, focusing on automated infrastructure audits (IAC security) for Cloud services, Terraform, and Kubernetes.
- Lead the remediation of findings from audits, scans, and penetration tests in collaboration with Technology teams.
- Coordinate the installation, configuration, and maintenance of security applications (AV, SIEM, DLP, FIM) with DevOps and related teams.
- Champion information security topics and concepts within the Technology team.
- Assist with source code security reviews for various development languages.
Requirements
- Minimum of 3 years of work experience in Information Security engineering.
- Excellent understanding of various information security frameworks and practices.
- Working experience with PCI-DSS compliance is a great plus.
- Advanced working experience with infrastructure security tools including WAFs, IP/IDS, and NextGen Firewall.
- Advanced working experience with system-level security tools including Antivirus, File Integrity Monitoring, and Log Management (SIEM) - Wazuh/OSSEC, Identity Access Management.
- Good knowledge in Kubernetes, Docker Swarm, or other cluster management software.
Skills
- Communication skills
- Interpersonal skills
- Organizational skills
- Team player
- Analytical skills
- Detail oriented
- Ability to learn new technology quickly
- Problem-solving
- Stakeholder management
- Infrastructure security tools
- System-level security tools
- Kubernetes
- Docker Swarm
Experience Level
- Minimum of 3 years work experience
Education Level
- Degree in Engineering or Information Technology related field
About the Company
- NymCard is a full-stack payments infrastructure company founded in 2018.
- We provide banks and financial institutions with one platform, nCore, to issue cards, move money, lend, settle, and manage financial crime.
- nCore is AI-native and built on a real-time data core.
- We are a team of 150+ with a high bar, where AI is integral to how every team works.
- We back decisions with data.
- Our work culture is BOLD: building trust through transparency, owning outcomes, leading with speed, and delivering excellence.
- We offer real ownership and room to move fast.
