Cyber Security Engineer

TL;DR

Cyber Security Engineer (Network Security/IAM): Managing and optimizing internal security infrastructure with an accent on Zero Trust Network Access (ZTNA), SASE platforms, and identity-first security. Focus on deploying enterprise security platforms, maintaining cloud security posture across multi-cloud environments, and enforcing secure usage policies for GenAI tools.

Company

hirify.global is a leading provider of web data collection and security solutions for a global workforce.

What you will do

• Lead and optimize network security architectures, including SASE platforms, VPN configurations, and firewalls to ensure a secure ZTNA environment.
• Drive the deployment and enhancement of enterprise security platforms such as EDR, XDR, DLP, and advanced Email Security suites.
• Act as the technical authority for IAM architecture, defining strict security policies including MFA and Conditional Access.
• Monitor and maintain cloud security posture across AWS, GCP, and Azure environments, including Kubernetes and containers.
• Own the vulnerability management lifecycle for infrastructure, endpoints, and corporate software.
• Define and enforce secure usage policies for GenAI tools (e.g., Copilot, Claude, ChatGPT) to prevent data leakage.

Requirements

• 4+ years of hands-on experience in Cyber Security, Network Security, or IT Security engineering.
• Deep packet-level knowledge of network protocols (TCP/IP, DNS, HTTP/S), VPN architectures, and SSL/TLS management.
• Proven experience with modern SASE platforms such as Cato Networks, Zscaler, or Palo Alto Prisma Access.
• Strong technical experience with Identity Providers and enterprise EDR/XDR platforms.
• Excellent analytical and troubleshooting skills for complex connectivity and security policies.

Nice to have

• Hands-on experience with cloud security tooling and posture management in AWS, GCP, or Azure.
• Familiarity with Incident Response (IR) processes, containment, and post-mortem activities.
• Experience with infrastructure and endpoint vulnerability scanning tools.
• Experience protecting SaaS systems using CASB and SSPM.