Security Engineer

As the Security Engineer at Allofresh, you will be responsible for building and implementing a robust security framework to protect our infrastructure, data, and systems. You will work closely with cross-functional teams, including IT, Product, and Development, to design security strategies, conduct risk assessments, and ensure compliance with industry standards. This is a unique opportunity to shape the security landscape of a company and establish a security-first culture.

Key Responsibilities:

• Security Framework Development: Design and implement a comprehensive security strategy for Allofresh, including policies, procedures, and guidelines.
• Infrastructure Security: Ensure the security of the company's infrastructure (cloud and on-premises) by managing firewall configurations, VPNs, network segmentation, and intrusion detection systems.
• Threat Monitoring & Response: Develop and maintain monitoring and alert systems to identify and respond to security incidents promptly.
• Risk Assessment & Mitigation: Conduct regular vulnerability assessments, penetration testing, and risk assessments on critical systems. Recommend and implement mitigation strategies.
• Data Security & Compliance: Ensure data security and privacy across all platforms, implementing encryption protocols and adhering to regulatory requirements.
• Identity & Access Management (IAM): Establish and maintain robust IAM policies, ensuring appropriate access control to sensitive systems and data.
• Security Awareness Training: Lead security awareness training programs for employees to promote a culture of security across the organization.
• Incident Response: Develop and maintain the company’s incident response plan. Coordinate and respond to security incidents, conducting root cause analysis and implementing preventive measures.
• Collaboration & Consultation: Serve as a security advisor to development, operations, and product teams, ensuring that security is embedded in the lifecycle of new projects and features.