Cybersecurity Engineer: Prembly

Job Description

We are a remote-first Data organization on a mission to safeguard digital businesses in emerging markets to transact globally while building trust with customers. We are seeking to hire a talented Cybersecurity Engineer to join our team and help us maintain and enhance our security posture.

The Cybersecurity Engineer will be responsible for designing, implementing, and managing security measures to protect Prembly’s data infrastructure, systems, and information. This role requires a deep understanding of cybersecurity principles, data protection, and best practices to defend against evolving cyber threats and ensure compliance with data security regulations.

Key Responsibilities:

1. Security Design and Implementation:
   • Design, implement, and manage security solutions to protect data infrastructure, applications, and databases.
   • Develop and maintain security architectures for data storage, processing, and transmission, ensuring alignment with industry standards and best practices.
2. Threat Detection and Response:
   • Monitor security systems and logs to identify potential threats and vulnerabilities related to data security.
   • Respond to data security incidents, conducting thorough investigations and implementing corrective actions.
3. Vulnerability Assessment & Penetration Testing:
   • Perform regular vulnerability assessments on systems, applications, and networks.
   • Conduct comprehensive penetration tests to evaluate our infrastructure & application security.
   • Analyze and prioritize vulnerabilities based on risk and impact.
   • Develop detailed reports outlining findings, impact, and remediation recommendations.
4. Data Protection and Privacy:
   • Implement and enforce data protection measures, including encryption, access controls, and data masking.
   • Ensure compliance with data security and privacy regulations (e.g., GDPR).
5. Risk Management:
   • Perform regular security assessments and penetration tests to identify data security vulnerabilities.
   • Collaborate with IT and data teams to assess and mitigate data security risks.
6. Policy and Compliance:
   • Develop and enforce data security policies, procedures, and standards.
   • Ensure compliance with relevant regulatory requirements and industry standards for data security.
7. Awareness and Training:
   • Conduct security awareness training for employees to promote a culture of data security.
   • Stay current with emerging cybersecurity and data protection trends, threats, and technologies.
8. Collaboration and Communication:
   • Work closely with the Engineering & Data teams to integrate data security measures into all aspects of the organization’s operations.
   • Communicate data security issues and recommendations to stakeholders in a clear and concise manner.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• At least 5 years of experience in cybersecurity or related roles, preferably within a data-driven organization.
• Relevant certifications such as CISSP, CEH, CISM, CISA, or similar are highly desirable.
• Strong knowledge of data security principles, protocols, and technologies.
• Experience with security tools and technologies (e.g., firewalls SIEM, DLP).
• Proficiency in scripting and automation (e.g., Python) is a plus.
• Excellent problem-solving skills and attention to detail.
• Strong communication and interpersonal skills.

Preferred Skills:

• Experience with cloud security (AWS, Azure, GCP) and securing data in cloud environments.
• Knowledge of compliance frameworks and standards related to data security and privacy.
• Familiarity with big data technologies and securing large-scale data environments.
• Experience in incident response and forensic analysis.