Cybersecurity Engineer

UnderDefense Inc.; United States; Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Training and career development

Knowledge sharing sessions

Branded souvenirs

Internal training and workshops

Comfortable workplace and office setup

Career growth opportunities

Paid vacations 18 days

Paid sick leave 5 days

Team building events

Regular compensation reviews

English language courses

Medical insurance coverage

Job summary

UnderDefense Inc. is seeking a cybersecurity engineer to lead security audits, build an ISMS, and shape secure architectures across IT and development teams. You will drive policies, risk assessments, and threat modeling while aligning with compliance requirements.

The role emphasizes cloud security (AWS, M365, GWS), IAM/SSO initiatives, vulnerability management, and security training. Strong English and proactive collaboration are essential for success.

Qualifications

• 3+ years in IT security and compliance.
• Practice-based knowledge of security management frameworks such as ISO 27000 series, GDPR, SOC2.
• Knowledge of technical implementation and system configuration (AWS, M365, GWS, vulnerability scanners, SIEM/EDR/MDM/DLP).
• Proven track record of IT security audits/projects implementation.
• Ability to develop information security policies, set up ISMS and guidelines, implement CIS20 and derive security requirements from them.
• Understanding access modelling, develop access models and assess them; SD duties segregation knowledge.
• Experience in IAM & SSO solutions; understand purpose and approaches of IAM.
• Good knowledge of risk management and ability to evaluate risks and create a risks management plan.
• Understanding OWASP Top 10; describe vulnerabilities and fix methods.
• Understanding vulnerability & patch management; knowledge in vulnerability scanners; validate scan results and provide recommendations.
• Ability to develop and conduct security trainings and workshops.
• Good level of professional English.
• Experience in Secure SDLC/DevSecOps would be a plus.
• Good communication skills, responsible, initiative, self-organized, eager to learn.

Responsibilities

• Conduct security audits and consulting projects, create an action plan & practical roadmap.
• Develop and enhance an information security management framework to ensure business sustainability.
• Build and maintain compliance guidelines; create policies and standards for IT security and compliance.
• Conduct general IT security awareness training for staff.
• Evaluate and manage corporate IT security risks.
• Build and maintain application-specific threat models; apply security principles to design.
• Conduct security configuration assessments of cloud systems.
• Participate in corporate certification and compliance activities.
• Design and implement security architecture with IT and software development teams.
• Prepare and document standard operating procedures and protocols.
• Coordinate with Account Management, Sales & Marketing, Legal, Delivery and Clients on security topics.
• Keep up to date with developments in IT security standards and threats.

Skills

Security frameworks knowledge

Cloud security (AWS, M365, GWS)

Security audits/assessments

IAM & SSO

Risk management

OWASP Top 10

Vulnerability management

Security training delivery

Security awareness

DevSecOps

Communication skills

Initiative / self-organization

Tools

Vulnerability scanners

SIEM/EDR

MDM/DLP

IAM & SSO solutions

Job description

Cybersecurity Engineer

Requirements:

• 3+ years in IT security and compliance
• Practice-based knowledge of security management frameworks, such as ISO 27k series, GDPR, SOC2 etc.
• Knowledge of technical implementation and system configuration (AWS, M365, GWS, vulnerability scanners, SIEM/EDR/MDM/DLP)
• Proven track record of IT security audits/projects implementation
• Ability to develop information security policies, setup ISMS and guidelines, implement CIS20 and derive security requirements from them;
• Understanding access modelling. Ability to develop access models and assess them. Understanding of segregation of duties
• Experience in IAM & SSO solutions. Understanding of purpose and approaches of IAM. Knowledge of key tasks: identify, authenticate, and authorize
• Good knowledge of risk management, its purpose, and approaches. Ability to evaluate risks and create a risks management plan
• Understanding OWASP Top 10. Ability to describe vulnerabilities, ways of exploitations, and fix methods
• Understanding and implementing vulnerability & patch management. Knowledge in vulnerability scanners. Ability to validate scan results and provide recommendations
• Ability to develop and conduct security trainings and workshops
• Good level of professional English
• Experience in Secure SDLC/DevSecOps would be a plus
• Good communication skills, responsible, initiative, self-organized, eager to learn

Responsibilities:

• Conduct security audits and consulting projects, create an action plan & practical roadmap based on the audit results
• Develop and enhance an information security management framework to ensure business sustainability
• Build and maintain compliance guidelines. Create policies and standards for IT security and compliance
• Conduct general IT security awareness training for the company staff
• Evaluate and manage corporate risks related to IT security
• Build and maintain application-specific threat models, explicitly apply security principles to design
• Conduct security configuration assessments of cloud systems.
• Participate in the corporate certification and compliance activities
• Design and implement security architecture and detailed cybersecurity designs together with IT and software development departments
• Prepare and document standard operating procedures and protocols
• Cooperation with Account Management, Sales & Marketing, Legal, Delivery and Clients for all security-related topics (audits, contractual compliance, reviews, risk assessments, etc.)
• Keeping up to date with developments in IT security standards and threats

What we offer:

• Trainingand career development programs
• Knowledge sharing sessions
• Branded souvenirs
• Internal training and workshop
• Comfortable workplace & office equipment
• Opportunities for self-realization and career growth
• 18 days of paid vacations & 5 days of paid sick leaves
• Quarterly Team building & corporate events (2 grand events per year)
• Guaranteed regular compensation review
• On-demand Knowledge Evaluation and promotion
• English language courses
• Medical insurance with pretty much good coverage for you to feel safe

About this position

Location

Office/Remote

Employment type

Full time

Department

Services