Security Engineer

Responsibilities:

• A successful candidate will thrive in a dynamic setting, leveraging their expertise in malicious attacks to identify and respond to cybersecurity incidents as a subject matter expert.
• Monitor, triage, and support incident response for suspicious activity, leveraging SIEM, EDR, MDR and other tools.
• Analyse system logs, alerts, and telemetry to detect threats and identify root causes of vulnerabilities and incidents.
• Collaborate on compliance and privacy tasks to facilitate responding to RFIs, RFPs and other audits.
• Lead vulnerability management efforts, including triage, prioritisation, validation, and remediation in partnership with engineering teams.
• Partner closely with engineering, DevOps, and platform teams to drive secure design and implementation practices.
• Help in getting and maintaining security certifications such as SOC2 Implement NIST and CIS guidelines within LG Ads infrastructure.
• Stay up-to-date on changes to relevant cybersecurity regulations and standards, and communicate those changes to stakeholders.
• Review and support SAST/DAST findings, help engineering teams interpret issues, validate false positives, dismiss findings when appropriate, and guide remediation.
• Contribute to the development of metrics and reporting mechanisms to track supply chain cybersecurity performance.

Requirements:

• Bachelor's degree in computer science, cybersecurity, or a related field, or equivalent practical experience.
• 5+ years of experience in security engineering, vulnerability management, or security operations.
• 3+ years' experience with SIEM platforms (e. g., Splunk, Sentinel) and EDR tools such as CrowdStrike or equivalents.
• Strong hands-on experience with Linux systems (hardening, troubleshooting, log analysis, scripting).
• Solid understanding of cloud security, especially AWS (IAM, VPC, EC2 S3 security groups, logging, etc. ).
• Familiarity with SAST/DAST tools and workflows, including triage, false-positive validation, and supporting developers.
• Strong understanding of cyber threat landscapes, attack vectors, and mitigation techniques.
• Strong understanding of common attack vectors, exploitation techniques, mitigation strategies and secure coding practices.
• Experience working with security frameworks such as NIST, CIS Controls, SOC 2 or ISO 27001
• Proven ability to collaborate with engineering teams and drive remediation efforts to closure.
• Strong problem-solving, communication, and cross-functional collaboration skills.
• Willingness to participate in on-call rotation for security incidents.

Preferred:

• Hands-on experience with CrowdStrike (SIEM, EDR) and AWS security services (e. g., GuardDuty, Security Hub, IAM Access Analyser, Firewalls, etc. ).
• Experience with infrastructure-as-code and policy-as-code (e. g., Terraform and CloudFormation) and previous work with DevSecOps.
• Scripting/automation skills (Python, Bash, etc. ) for remediation and security tooling.
• Experience with threat modelling, security architecture reviews and application security tools (SAST, DAST, etc. ).
• Relevant certifications (e. g., GCIH, GCIA, GCLD, GCPN, and AWS Security Speciality).
• Understanding of AI-driven or ML-based security tools. Hands-on incident response experience with Linux.