Information Security Engineer

Cyprus

Join FxPro: a leading international fintech company. Be a part of our expanding international team, with offices in Limassol, London, Nassau, and Dubai. FxPro boasts a diverse workforce of over 600 employees representing 50 nationalities, making it an exciting and dynamic workplace. At FxPro, we see each team member as an integral part of our success story.

As an Information Security professional, you will be a part of our rapidly growing team. You will actively work to safeguard our information assets and ensure a robust security posture.

Responsibilities

Incident Response & Investigation: Perform security incident investigations to identify root causes; design and implement robust corrective and preventive actions (CAPA)
Vulnerability Management: Strategize and execute responses to zero-day vulnerabilities and emerging threats
Risk Mitigation: Proactively identify security risks and control gaps across infrastructure, applications, and business processes; recommend and deploy appropriate mitigating controls
Policy Governance: Support the development, maintenance, and continuous improvement of the organization’s Information Security Management System (ISMS) and internal policies
Security Awareness: Contribute to the design and delivery of high-impact security awareness and training programs across the organization
Monitoring & Analysis: Continuously monitor security alerts to identify, validate, and escalate potential incidents, ensuring a rapid and effective response
Infrastructure & Tooling: Manage and optimize the security technology stack, including Cloud WAF/CDN, EDR/XDR, SIEM, Email/Web Security, and DNS security
SaaS & Cloud Security: Secure and govern the company’s SaaS application landscape and optimize the utilization of Microsoft Security features

Requirements

Experience: Minimum of 5 years of hands-on experience in Information Security, with a strong emphasis on Security Operations (SecOps)
Policy & Compliance: Proven track record in supporting information security policies and the practical implementation of security controls
Audit & Assessment: Experience conducting or participating in formal risk assessments, internal audits, and comprehensive security reviews
Technical Proficiency: Deep understanding of modern security technologies (WAF, EDR/NDR, Email/Web Security) and core networking protocols (DNS, TCP/IP)
Frameworks & Standards: Familiarity with industry standards and regulatory requirements is highly desirable (e.g., DORA, GDPR, ISO/IEC 27001, ISO/IEC 27005, and OWASP)
Soft Skills: Strong analytical and problem-solving capabilities, with the ability to translate complex security issues into actionable remediation plans for both technical and non-technical stakeholders
Operational Mindset: A proactive, self-motivated professional who can work independently while fostering a culture of collaboration across cross-functional teams
Communication: Exceptional written and verbal communication skills; fluency in English is required