Information Security Engineer

Chypre

Join FxPro : a leading international fintech company. Be a part of our expanding international team, with offices in Limassol, London, Nassau, and Dubai. FxPro boasts a diverse workforce of over 600 employees representing 50 nationalities, making it an exciting and dynamic workplace. At FxPro , we see each team member as an integral part of our success story.

As an Information Security professional, you will be a part of our rapidly growing team. You will actively work to safeguard our information assets and ensure a robust security posture.

Responsibilities

Incident Response & Investigation: Perform security incident investigations to identify root causes; design and implement robust corrective and preventive actions (CAPA)
Vulnerability Management: Strategize and execute responses to zero-day vulnerabilities and emerging threats
Risk Mitigation: Proactively identify security risks and control gaps across infrastructure, applications, and business processes; recommend and deploy appropriate mitigating controls
Policy Governance: Support the development, maintenance, and continuous improvement of the organization’s Information Security Management System (ISMS) and internal policies
Security Awareness: Contribute to the design and delivery of high-impact security awareness and training programs across the organization
Monitoring & Analysis: Continuously monitor security alerts to identify, validate, and escalate potential incidents, ensuring a rapid and effective response
Infrastructure & Tooling: Manage and optimize the security technology stack, including Cloud WAF/CDN, EDR/XDR, SIEM, Email/Web Security, and DNS security

Requirements

Experience: Minimum of 5 years of hands-on experience in Information Security, with a strong emphasis on Security Operations (SecOps)
Policy & Compliance: Proven track record in supporting information security policies and the practical implementation of security controls
Audit & Assessment: Experience conducting or participating in formal risk assessments, internal audits, and comprehensive security reviews
Technical Proficiency: Deep understanding of modern security technologies (WAF, EDR/NDR, Email/Web Security) and core networking protocols (DNS, TCP/IP)
Frameworks & Standards: Familiarity with industry standards and regulatory requirements is highly desirable (e.g., DORA, GDPR, ISO/IEC 27001, ISO/IEC 27005, and OWASP)
Soft Skills: Strong analytical and problem-solving capabilities, with the ability to translate complex security issues into actionable remediation plans for both technical and non-technical stakeholders
Operational Mindset: A proactive, self-motivated professional who can work independently while fostering a culture of collaboration across cross-functional teams