IT Security Engineer

Overview

Vulnerability & Patch Remediation

• Own technical remediation of infrastructure vulnerabilities across Windows, Linux, and network platforms.
• Track Critical and High findings to closure within remediation SLAs.
• Coordinate patching windows with SRE, application, and business owners.

Infrastructure Security Operations

• Apply and maintain hardening baselines for servers, endpoints, network devices, and cloud workloads.
• Maintain EDR, MDM, and DLP coverage across all in-scope assets — identify and close gaps.
• Remediate security gaps across server, endpoint, network, and cloud surfaces.

SOC / MDR Case Remediation

• Investigate SOC and MDR cases that require action on infrastructure.
• Determine root cause on the affected asset (server, endpoint, network, cloud).
• Apply technical fixes and close remediation actions in coordination with the SOC / MDR partner.

PAM & Privileged Access Implementation

• Onboard privileged accounts into the enterprise PAM platform.
• Remediate privileged access gaps across infrastructure (shared accounts, standing access, weak credential handling).
• Support secure administrative access practices for SRE, DBAs, and infrastructure operators.

Cloud Security Operations

• Operate Oracle Cloud Infrastructure (OCI) security controls — IAM policy, network security lists, security zones.
• Review and remediate OCI Cloud Guard findings on a continuous basis.
• Support secure cloud configuration during build and change activities.

Backup & Restore Security

• Own technical security controls on backup and restore infrastructure — access control, encryption, immutability, and segmentation across backup and recovery paths.
• Validate hardening of backup repositories and restore targets, and verify restored systems return to baseline before release.
• Execute security validation during restore-testing exercises — verify backup integrity, detect tampering, and confirm recovered systems are safe to return to service.
• This role does not own BCP, DR strategy, RTO/RPO, or backup operations.

Assist Responsibilities

Change Management

• Raise security-related change requests in the ITSM system.
• Attach security impact assessments, test results, and rollback evidence.
• Support emergency changes when a security incident requires accelerated execution.
• Not the Change Manager.

User Access Reviews

• Extract access reports from infrastructure (AD, cloud, PAM, network devices).
• Implement approved access removals or modifications.
• Provide evidence of completion to the review owner.
• Not the owner of the review process or business sign-off.
• Segregation of Duties
• Implement approved technical remediation on infrastructure.
• Support investigation of suspected violations on infrastructure assets.
• Not the owner of SoD governance or policy.

MDM Compliance

• Identify non-compliant or unenrolled devices.
• Coordinate enrollment and remediation with IT Support (primary owner).
• Not the owner of endpoint support or device lifecycle.

Application Security Remediation

• Support remediation only when the fix requires infrastructure, IAM, network, cloud, or server changes.
• Not the owner of code remediation.