Intelligence Match
Match: ??%
Unlock Your Personalized Match
Sign in to see your exact score breakdown and personalized insights.
Team Tagline
About the role
ARM Life, formerly CrystaLife Assurance Plc., is the insurance subsidiary of Asset & Resource Management Company Ltd (ARM), one of Nigeria's largest non-bank financial services firms focused on asset management. The Information Security Engineer will join the team in Lagos to handle VAPT, SOC, SIEM monitoring, network security, endpoint security, and enterprise IT infrastructure.
Required Skills
Preferred Skills
Similar Skills not Listed
Responsibilities
- Conduct end-to-end VAPT across web applications, APIs, mobile applications, network infrastructure, servers, endpoints, and enterprise IT assets.
- Perform reconnaissance, enumeration, manual validation, exploitation, privilege escalation, and post-exploitation activities within approved testing scope.
- Assess authentication, authorization, session management, access control, business logic, input validation, API security, cryptography, and configuration weaknesses.
- Conduct internal and external network penetration tests covering network devices, exposed services, firewalls, VPNs, remote access, and segmentation.
- Perform vulnerability scanning and validation; prioritize findings based on severity, exploitability, and business impact.
- Produce technical VAPT reports containing evidence, risk ratings, affected assets, remediation recommendations, and executive summaries.
- Conduct remediation validation and retesting to confirm vulnerabilities have been effectively closed.
- Support SOC operations through SIEM monitoring, alert investigation, event correlation, threat hunting, and escalation of suspected incidents.
- Develop, review, and tune SIEM detection use cases, correlation rules, dashboards, and alert thresholds.
- Investigate suspicious endpoint, network, and authentication activities using SIEM and EDR telemetry.
- Perform security configuration reviews of firewalls, servers, endpoints, Active Directory, cloud resources, and critical applications.
- Collaborate with infrastructure, network, application development, and IT operations teams to remediate vulnerabilities and strengthen controls.
- Monitor SIEM, EDR, and security infrastructure alerts and investigate potential threats and anomalous activities.
- Perform log analysis across authentication, network, endpoint, application, and security-device sources.
Job Application Safety Disclaimer
Your security and privacy are our top priorities. Please be aware that InStreamIQ will never ask you to pay any fees for job applications, placements, or training as a condition of employment.
Furthermore, legitimate employers will not ask for sensitive personal identification such as your Bank Verification Number (BVN), National Identification Number (NIN), or Passport details during the initial application phase. Do not share financial information or make any payments to individuals or organizations claiming to represent an employer. If you encounter any suspicious requests, please report the listing immediately via our support channels.