Cloud Infrastructure & Security Engineer

Description

AudioCodes is a global company with an enduring commitment to the foundation of all human communications - voice. We design, manufacture, and sell advanced Voice-over-IP and converged VoIP and data networking products, applications and professional services to enterprises, medium and small business, as well as to service providers globally.

At AudioCodes, we recognize that our strength as a company comes from the unique talents that each of our employees brings to the table. After all, they are our most valuable assets. As such, we strongly believe that the only way to keep ahead of the curve and successfully meet the challenges of the 21st century is to invest heavily in our team. At the same time, through carefully tailored guidance and nurturing, we encourage each employee to continually strive for professional excellence, achievement, and real personal development. We offer a flexible and collaborative work environment, along with career growth opportunities.

We're looking for an Infrastructure Security Engineer to join our global team. The ideal candidate will possess extensive experience at on-prem and clouds IT Infrastructure systems and who has worked in a large enterprise environment. As an IT Infrastructure Security Engineer, you will protect hundreds of servers and assets, protect multi-vendor environments across AudioCodes’s data centers, both on premises and in the public cloud while also having the opportunity to grow and learn new technologies.

Requirements

·        Experience:

o   Minimum of 5+ years of experience in IT infrastructure system and security within a large enterprise environment.

o   In-depth knowledge of Windows Server administration (Active Directory, Group Policy, IIS, etc.).

o   Experience with hardening operating systems according to security best practices (e.g., CIS benchmarks)

o   Proven track record of securing complex, multi-vendor IT infrastructure systems, both on-premises and in public cloud environments (AWS, Azure, GCP).

o   Experience with virtualization platforms (e.g., VMware vSphere, Hyper-V).

·        Technical Expertise:

o   Deep understanding of IT infrastructure components, including servers (Windows and Linux), networking devices (firewalls, routers, switches).

o   Strong proficiency in security principles and practices, including vulnerability management, threat detection, incident response, and security hardening.

o   Expertise in implementing and managing security tools and technologies, such as:

§ Intrusion Detection/Prevention Systems (IDS/IPS)

§ Security Information and Event Management (SIEM) systems

§ Vulnerability scanners (e.g., Nessus, Qualys)

§ Firewalls (e.g., Palo Alto Networks, Fortinet)

§ Cloud security tools and services (e.g., AWS Security Hub, Azure Security Center, Defender for cloud).

§ IAM solutions.

o   Proficiency in network security protocols (e.g., TCP/IP, DNS, DHCP, VPN, TLS/SSL).

o   Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation.

o   Experience with security compliance frameworks (e.g., SOC 2, ISO 27001, NIST).

·        Analytical and Problem-Solving Skills:

o   Excellent analytical and problem-solving skills to identify and resolve security vulnerabilities and incidents or system issues

o   Ability to perform root cause analysis and implement effective remediation measures.

·        Communication and Collaboration:

o   Strong written and verbal communication skills to document security procedures, report incidents, and collaborate with cross-functional teams.

o   Ability to work effectively in a global team environment.

Preferred Qualifications:

·        Relevant security certifications (e.g., CISSP, CISM, CompTIA Security+).

·        Experience with network automation.

·        Experience with disaster recovery and business continuity planning.

Personal Attributes:

·        Proactive and self-motivated with a strong sense of ownership.

·        Ability to adapt to changing priorities and technologies.

·        Continuous learning mindset to stay updated on the latest security threats and trends.

·        Strong attention to detail.