Infrastructure Security Engineer
Job description
About the role
As an , you will play a pivotal role in safeguarding our infrastructure and ensuring the integrity of our systems. You will be responsible for identifying vulnerabilities, implementing security measures, and collaborating with cross-functional teams to enhance our security posture. This position offers a unique opportunity to work in a dynamic environment where your expertise will directly impact the security of our operations.
Key facts
What you'll do
- Conduct comprehensive security assessments of our infrastructure to identify potential vulnerabilities and risks.
- Design and implement security solutions that align with industry best practices and regulatory requirements.
- Collaborate with development and operations teams to integrate security into the software development lifecycle (SDLC).
- Monitor security alerts and incidents, responding promptly to mitigate risks and enhance system resilience.
- Develop and maintain security policies, procedures, and documentation to ensure compliance and operational efficiency.
- Perform regular penetration testing and vulnerability scanning to proactively identify and address security weaknesses.
- Lead incident response efforts, coordinating with relevant stakeholders to investigate and remediate security breaches.
- Stay updated on the latest security threats, trends, and technologies to continuously improve our security strategies.
- Provide training and awareness programs for employees to foster a culture of security within the organization.
- Collaborate with external partners and vendors to assess and enhance the security of third-party services and tools.
- Participate in security audits and assessments to ensure adherence to compliance standards and frameworks.
- Contribute to the development of a robust disaster recovery and business continuity plan to minimize downtime in case of incidents.
Requirements
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- A minimum of 3 years of experience in infrastructure security or a related domain.
- Strong understanding of security frameworks and standards such as ISO 27001, NIST, or CIS.
- Proficiency in network security protocols, firewalls, intrusion detection systems, and encryption technologies.
- Experience with cloud security practices, particularly in environments such as AWS, Azure, or Google Cloud.
- Familiarity with scripting languages (e.g., Python, Bash) for automation and security tool development.
- Excellent problem-solving skills and the ability to work effectively under pressure.
- Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
- Relevant certifications such as CISSP, CISM, or CEH are highly desirable.
Nice to have
- Experience with security information and event management (SIEM) tools.
- Knowledge of DevSecOps practices and tools for integrating security into CI/CD pipelines.
- Familiarity with compliance regulations such as GDPR, HIPAA, or PCI-DSS.
- Previous experience in a startup or fast-paced environment is a plus.
Skills & tools
As an Infrastructure Security Engineer, you will utilize a variety of tools and technologies to enhance our security framework. Familiarity with security assessment tools, vulnerability scanners, and incident response platforms will be essential. You should also have experience with configuration management tools and cloud security solutions. Strong analytical skills and a proactive mindset will be crucial in identifying and mitigating security risks.
Practical notes
This position is based in Sofia, Bulgaria, and offers a full-time engagement with competitive salary packages. Graphwise is committed to fostering a diverse and inclusive work environment, and we welcome applications from candidates of all backgrounds. We provide visa sponsorship for qualified candidates, ensuring that you can join our team regardless of your current location. If you are passionate about security and eager to make a difference in a growing company, we encourage you to apply through our careers page at [Graphwise Careers](https://graphwise.bamboohr.com/careers/123).
META
Company: Graphwise
Title: Infrastructure Security Engineer
Listed
location: Sofia, Sofia
Job type: Full-time
About the company
Graphwise designs, ships, and runs measurable AI systems with reliability, governance, and business impact baked in.