ABOUT THE ROLE

Mixx by Yas is looking for an experienced Cyber Security Engineer with strong expertise in cybersecurity technologies, secure architecture, cloud security, threat management and security automation.

CORE RESPONSIBILITIES

• Design and maintain secure architectures for applications, infrastructure, cloud and hybrid environments.
• Implement security hardening and manage security tools such as Firewalls, SIEM, EDR/XDR, IAM and PAM.
• Monitor, investigate and respond to security incidents, including forensic and recovery activities.
• Manage patching, vulnerability remediation and security updates across systems and applications.
• Ensure compliance with security standards and regulations, including ISO 27001, NIST, PCI-DSS and GDPR.
• Manage identity and access controls, including user provisioning, MFA, privileged access and access reviews.
• Secure cloud environments through security controls, monitoring and configuration management.
• Conduct security assessments and provide recommendations to strengthen cyber resilience.
• Support SOC operations and collaborate on incident investigations and prevention initiatives.
• Provide security guidance and training on secure coding, infrastructure security and cybersecurity best practices.

QUALIFICATIONS & EXPERIENCE

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Computer Engineering, or a related field.
• 5+ years of cybersecurity experience.
• Relevant industry certifications.
• Expertise in container security.
• Expertise in API security.
• Experience with threat modeling.
• Experience with security automation.
• Experience with SOAR platforms.
• Knowledge of Zero Trust architecture.

CORE COMPETENCIES

• Security technologies, including Firewalls, IDS/IPS, SIEM and Vulnerability Management.
• Network security, encryption and authentication protocols.
• Linux/Unix and Windows security administration and hardening.
• Cloud security across AWS, Azure or GCP environments.
• Infrastructure as Code, including Terraform, CloudFormation and Ansible, and secure CI/CD practices.
• Secure coding, code review and OWASP Top 10 knowledge.
• Security frameworks and compliance standards, including ISO 27001, NIST CSF, AS Controls and PCI-DSS.

• Design and maintain secure architectures for applications, infrastructure, cloud and hybrid environments.
• Implement security hardening and manage security tools such as Firewalls, SIEM, EDR/XDR, IAM and PAM.
• Monitor, investigate and respond to security incidents, including forensic and recovery activities.
• Manage patching, vulnerability remediation and security updates across systems and applications.
• Ensure compliance with security standards and regulations, including ISO 27001, NIST, PCI-DSS and GDPR.
• Manage identity and access controls, including user provisioning, MFA, privileged access and access reviews.
• Secure cloud environments through security controls, monitoring and configuration management.
• Conduct security assessments and provide recommendations to strengthen cyber resilience.
• Support SOC operations and collaborate on incident investigations and prevention initiatives.
• Provide security guidance and training on secure coding, infrastructure security and cybersecurity best practices.

• Security technologies, including Firewalls, IDS/IPS, SIEM and Vulnerability Management.
• Network security, encryption and authentication protocols.
• Linux/Unix and Windows security administration and hardening.
• Cloud security across AWS, Azure or GCP environments.
• Infrastructure as Code, including Terraform, CloudFormation and Ansible, and secure CI/CD practices.
• Secure coding, code review and OWASP Top 10 knowledge.
• Security frameworks and compliance standards, including ISO 27001, NIST CSF, AS Controls and PCI-DSS.
• Expertise in container security.
• Expertise in API security.
• Experience with threat modeling.
• Experience with security automation.
• Experience with SOAR platforms.
• Knowledge of Zero Trust architecture.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Computer Engineering, or a related field.
• 5+ years of cybersecurity experience.
• Relevant industry certifications.