Security Engineer

Responsibilities:
A successful candidate will thrive in a dynamic setting, leveraging their expertise in malicious attacks to identify and respond to cybersecurity incidents as a subject matter expert.
Monitor, triage, and support incident response for suspicious activity, leveraging SIEM, EDR, MDR and other tools.
Analyse system logs, alerts, and telemetry to detect threats and identify root causes of vulnerabilities and incidents.
Collaborate on compliance and privacy tasks to facilitate responding to RFIs, RFPs and other audits.
Lead vulnerability management efforts, including triage, prioritisation, validation, and remediation in partnership with engineering teams.
Partner closely with engineering, DevOps, and platform teams to drive secure design and implementation practices.
Help in getting and maintaining security certifications such as SOC2 Implement NIST and CIS guidelines within LG Ads infrastructure.
Stay up-to-date on changes to relevant cybersecurity regulations and standards, and communicate those changes to stakeholders.
Review and support SAST/DAST findings, help engineering teams interpret issues, validate false positives, dismiss findings when appropriate, and guide remediation.
Contribute to the development of metrics and reporting mechanisms to track supply chain cybersecurity performance.
Requirements:
Bachelor's degree in computer science, cybersecurity, or a related field, or equivalent practical experience.
5+ years of experience in security engineering, vulnerability management, or security operations.
3+ years' experience with SIEM platforms (e. g., Splunk, Sentinel) and EDR tools such as CrowdStrike or equivalents.
Strong hands-on experience with Linux systems (hardening, troubleshooting, log analysis, scripting).
Solid understanding of cloud security, especially AWS (IAM, VPC, EC2 S3 security groups, logging, etc. ).
Familiarity with SAST/DAST tools and workflows, including triage, false-positive validation, and supporting developers.
Strong understanding of cyber threat landscapes, attack vectors, and mitigation techniques.
Strong understanding of common attack vectors, exploitation techniques, mitigation strategies and secure coding practices.
Experience working with security frameworks such as NIST, CIS Controls, SOC 2 or ISO 27001
Proven ability to collaborate with engineering teams and drive remediation efforts to closure.
Strong problem-solving, communication, and cross-functional collaboration skills.
Willingness to participate in on-call rotation for security incidents.
Preferred:
Hands-on experience with CrowdStrike (SIEM, EDR) and AWS security services (e. g., GuardDuty, Security Hub, IAM Access Analyser, Firewalls, etc. ).
Experience with infrastructure-as-code and policy-as-code (e. g., Terraform and CloudFormation) and previous work with DevSecOps.
Scripting/automation skills (Python, Bash, etc. ) for remediation and security tooling.
Experience with threat modelling, security architecture reviews and application security tools (SAST, DAST, etc. ).
Relevant certifications (e. g., GCIH, GCIA, GCLD, GCPN, and AWS Security Speciality).
Understanding of AI-driven or ML-based security tools. Hands-on incident response experience with Linux.

Experience
4-8 yrs