Cyber Security Engineer Job

We need a 'Cyber Security Engineer' with 2-5 years of experience to protect our APIs, infrastructure, and data. The ideal candidate will have expertise in API security, infrastructure protection, and compliance (including GDPR).

Key Responsibilities:

1. Implement and monitor security measures for APIs, microservices, and infrastructure.
2. Conduct API security assessments, focusing on BOLA and other OWASP API top 10 risks.
3. Perform infrastructure vulnerability assessments and penetration testing.
4. Develop and implement security policies aligned with GDPR and other regulations.
5. Design robust authentication and authorization mechanisms.
6. Respond to security incidents across APIs and infrastructure.
7. Collaborate with development teams to integrate security into the SDLC.
8. Stay current with API, infrastructure, and data protection security trends.

Strong knowledge of:

- API security best practices (BOLA, OWASP API Security Top 10)
- Infrastructure security (firewalls, IDS/IPS, SIEM)
- GDPR and other relevant data protection regulations
- Cloud security (AWS)
- Containerization and microservices security
- API gateways, OAuth 2.0, JWT
- Security testing tools (e.g., OWASP ZAP, Burp Suite)
- Infrastructure-as-Code and security automation
- Familiarity with DevSecOps practices

2