Information security engineer

07-05-2026

Participation in the development and implementation of the organization's information security policies, standards, and procedures;
Defining a compliance strategy aligned with ISO 27001, NIST, and other international frameworks;
Conducting regular assessments of information security risks, analyzing threats, and preparing risk mitigation action plans;
Planning penetration tests and vulnerability assessments, and ensuring corrective actions are taken based on the results;
Evaluating the security risks of third-party vendors and service providers;
Designing and managing IAM (Identity and Access Management) systems;
Managing Privileged Access Management (PAM) solutions;
Organizing regular Access Reviews of access rights;
Ensuring the security of Single Sign-On (SSO) and Active Directory/LDAP;
Implementing Multi-Factor Authentication (MFA) solutions;
Ensuring the effective operation of security infrastructure such as Firewall, IDS/IPS, SIEM, DLP, and EDR;
Managing the detection, investigation, response, and recovery processes for cyber incidents.

Higher education: Bachelor's degree in Information Technology, Computer Science, or a related field;
Work experience: Minimum 4–6 years of experience in information security or cyber defense;
Analytical thinking skills;
Attention to detail, accuracy, and a systematic approach to documentation;
At least one of the following certifications is required; others are considered an advantage: CISM, CEH, CompTIA Security+, ISO 27001 Lead Auditor, or Lead Implementer;
Language proficiency: Azerbaijani – fluent; English – B2 or above. Knowledge of Russian is considered an advantage.