Cyber Security Engineer

Job Description & Responsibilities We are seeking a highly skilled and hands-on Cyber Security Engineer with strong expertise in cybersecurity and infrastructure security across both on-premise and cloud environments (Azure and/or AWS). The ideal candidate will play a key role in strengthening RTS’s security posture as we modernize and operate hybrid infrastructure supporting mission-critical airline applications. The role requires deep operational security expertise, experience supporting compliance initiatives such as ISO 27001 and SOC 2, and the ability to collaborate effectively with IT, DevOps, and Engineering teams.

Security Operations & Incident Response

• Monitor, analyze, and investigate alerts generated from SIEM, endpoint protection, firewall, and cloud security platforms.
• Lead security incident response activities including containment, root cause analysis, remediation, and post-incident reviews.
• Develop, maintain, and enhance incident response procedures and playbooks.
• Coordinate with internal stakeholders during security events and escalations.

Infrastructure & Cloud Security

• Secure on-premise infrastructure including Windows Server, IIS, SQL Server, virtualization environments (Hyper-V/VMware), and Active Directory.
• Implement and manage security controls across Azure and/or AWS cloud environments.
• Manage network security including firewall policies, VPNs, network segmentation, IDS/IPS, and cloud security groups.
• Ensure systems and environments are hardened as per CIS Benchmarks and NIST security standards.

Vulnerability & Risk Management

• Conduct regular vulnerability assessments across infrastructure, applications, and cloud workloads.
• Coordinate remediation activities with IT, Engineering, and DevOps teams.
• Support external Vulnerability Assessment and Penetration Testing (VAPT) engagements.
• Assist in identifying and mitigating security risks across the organization.

Application & Dev Security Collaboration

• Support implementation of secure SDLC practices within development teams.
• Review application architecture, APIs, and security controls.
• Assist in implementing secrets management, privileged access controls, and identity security practices within cloud environments.
• Collaborate with DevOps teams to strengthen CI/CD security practices.

Compliance & Governance

• Support compliance initiatives related to ISO 27001, SOC 2 Type II, GDPR, and related regulatory frameworks.
• Maintain security documentation, audit evidence repositories, and compliance records.
• Participate in internal and external audits.
• Support organizational risk assessments and security awareness initiatives.

Identity & Access Management

• Enforce least-privilege access principles across systems and applications.
• Support role-based access control (RBAC) implementation and periodic reviews.
• Conduct user access reviews and privilege audits.
• Implement and monitor privileged access management (PAM) controls.
• Support SSO, MFA, and secure identity federation across enterprise applications.

AI Security & Responsible AI Governance

• Support secure deployment and monitoring of AI/ML components including Large Language Models (LLMs) used within enterprise platforms.
• Ensure AI implementations align with security, privacy, and data governance requirements.
• Define and enforce controls around AI data usage, model access, prompt security, and API integrations.
• Collaborate with product and engineering teams to mitigate risks such as prompt injection, model misuse, and data leakage.
• Participate in developing internal AI governance policies covering ethical AI usage, bias mitigation, auditability, and regulatory compliance.
• Evaluate third-party AI services for adequate security, privacy, and contractual controls.

Candidate Requirements Education

• Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.

Certifications Preferred Certifications And Knowledge Include

• Azure Security Engineer Associate
• AWS Security Specialty
• Certified Ethical Hacker (CEH)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• ISO 27001 Lead Implementer / Lead Auditor

Work Experience

• 6–10 years of relevant experience in cybersecurity, information security, or security engineering roles.
• Experience working within Airlines, Aviation, or Travel domain environments will be an added advantage.

Skills & Competencies Technical Skills

• Strong experience securing both on-premise and cloud environments (Azure and/or AWS).
• Hands-on expertise with: + Windows Server & Active Directory security + Firewalls, IDS/IPS, and network security technologies + SIEM and security monitoring tools + Vulnerability assessment and scanning tools + Endpoint protection and EDR solutions + Cloud-native security platforms such as Azure Security Center, AWS Security Hub, IAM, etc.

Security Knowledge

• Strong understanding of: + Network protocols and enterprise security architecture + Encryption technologies, certificate management, and key lifecycle management + Security frameworks including ISO 27001, NIST, and CIS Benchmarks + AI/ML security risks such as prompt injection, model vulnerabilities, access control risks, and data leakage + Emerging AI governance frameworks and Responsible AI principles

Soft Skills

• Excellent written and verbal communication skills.
• Ability to clearly articulate security risks, recommendations, and controls to both technical and non-technical stakeholders.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Ability to work effectively in cross-functional and fast-paced environments