Security Engineer & Researcher

Job Description

Title: Security Engineer & Researcher

Company Name: MIST

Vacancy: --

Age: Na

Job Location: Dhaka (Mirpur12)

Salary: Negotiable

Experience:

• At most 3 years
• Freshers are also encouraged to apply.

• Bachelor of Science (BSc) in Computer Science & Engineering
• Bachelor of Science (BSc) in Electrical & Electronic Engineering
• Bachelor of Science (BSc) in Computer Science

• At most 3 years
• Freshers are also encouraged to apply.

Job Context and Responsibilities:

The selected candidate will be responsible for security engineering, threat detection, and research-oriented defensive operations. The individual must have strong technical knowledge and hands-on experience in the following areas:

Core Technical Skills:

• Programming & Scripting: Advanced proficiency in Python, Bash, and PowerShell for automation, security tooling, and log analysis.

• SIEM Management: Expertise in configuring, optimizing, and managing Security Information and Event Management (SIEM) platforms to collect, correlate, and analyze security logs from diverse sources (network, host, and application).

• Detection Engineering: Experience developing and fine-tuning custom detection rules, correlation logic, and alert mechanisms to identify simulated and real-world attack patterns (DDoS, lateral movement, privilege escalation, etc.)

• Defensive Systems: Skilled in implementing and managing Intrusion Detection/Prevention Systems (IDS/IPS) and Endpoint Detection and Response (EDR) tools within Blue Team environments.

• Threat Hunting: Proficient in conducting proactive threat hunting operations.

Experience & Domain Expertise:

• Security Operations: Extensive hands-on experience in SOC operations, incident response, and security monitoring within defense and banking environments.

• Penetration Testing: Hands-on experience in web and network penetration testing.

• Threat Intelligence: Strong understanding of global threat landscapes, adversary tactics, and frameworks such as MITRE ATT&CK and OWASP Top 10.

• Defensive Technologies: In-depth practical experience with network traffic analysis, host-based detection, and forensic investigation tools.

• Analytical Capability: Strong analytical mindset with the ability to interpret complex telemetry data, identify anomalies, and determine root causes of incidents.

• Integration: Practical experience integrating detection and defense systems.