Cybersecurity Engineer

🕒 May 1

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Toku

WebsiteLinkedInAll Job Openings

51 - 200 employees

📡 Telecommunications

☁️ SaaS

💰 $5M Series A on 2022-10

Telecommunications • SaaS • AI

Toku is a company that specializes in AI-powered communication solutions, focusing particularly on customer engagement and business telephony. They offer a wide range of products, including conversational AI platforms, AI voice agents, and business telephony solutions for platforms like Microsoft Teams and Zoom Phone. Their services also include customer engagement tools such as contact centers, campaign managers, and feedback management systems. Toku is particularly focused on enhancing customer experience (CX) in the APAC region with solutions tailored to address unique language and communication challenges in the area. Additionally, Toku provides embedded communication solutions like programmable voice and messaging, user verification, and number masking to enhance security and efficiency in client communications. They cater to various industries including government, fintech, insurance, and travel, aiming to provide omnichannel and seamless digital experiences.

📋 Description

• Monitor, investigate, and respond to security events, alerts, threats, and incidents across systems, networks, cloud infrastructure, and endpoints. • Implement and maintain practical security controls across infrastructure, access, firewall, endpoint, cloud, and system environments. • Support security incident response activities, including investigation, containment, root cause analysis, and follow-up remediation. • Identify, assess, prioritise, and help remediate vulnerabilities across operating systems, infrastructure, applications, and supporting services. • Support security hardening and best practices across AWS and hybrid infrastructure environments. • Help manage and improve access control, password controls, account security, permissions, and related operational processes. • Review firewall rules, network access, and infrastructure security configurations to ensure appropriate protection and best practice alignment. • Support the use, improvement, or implementation of security monitoring tools, including Security Information and Event Management (SIEM) solutions where relevant. • Conduct or support vulnerability assessments, risk assessments, security control testing, and remediation tracking. • Liaise with external vendors, penetration testers, or security auditors where needed, and help close security findings. • Create and improve security procedures, runbooks, and operational practices that help meet Toku’s internal security requirements. • Work closely with infrastructure, engineering, compliance, and business teams to implement practical security improvements.

🎯 Requirements

• Cybersecurity operations experience: At least 3 years of relevant hands-on cybersecurity, security operations, infrastructure security, or cloud security experience. • Hands-on security implementation: Practical experience implementing security controls, guardrails, monitoring, and remediation activities in real production environments. • Infrastructure security background: Strong understanding of systems, networks, firewalls, access control, endpoint security, and infrastructure hardening. • Cloud security experience: Experience securing cloud environments, ideally AWS, including cloud access controls, monitoring, vulnerability management, and security best practices. • Incident response: Experience investigating security incidents, alerts, suspicious activity, malware, vulnerabilities, or system/network security breaches. • SIEM exposure: Experience working with SIEM or security monitoring tools, with the ability to investigate alerts and recommend improvements. • Vulnerability management: Experience with vulnerability assessment, remediation tracking, patching, risk assessment, or tools such as Tenable, Rapid7, Nexpose, or similar. • Network & endpoint security: Good working knowledge of firewalls, endpoint protection, Intrusion Detection / Prevention Systems (IDS/IPS), Web Application Firewalls (WAF), and related security tools. • Linux & Windows security: Comfortable working across Linux and Windows environments, including operating system security, patching, and hardening practices. • Security testing awareness: Experience supporting penetration testing, vulnerability assessment, or security control testing would be valuable. • Compliance awareness: Familiarity with security standards or frameworks such as ISO 27001, SOC 2, or similar would be advantageous, but this is not a pure governance role. • Certifications (nice to have): Security certifications such as CISSP, cloud security certifications, CREST, SANS/GIAC, or equivalent practical experience would be an advantage. • Independent working style: Ability to operate independently, identify gaps, recommend improvements, and follow through on practical security implementation.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible work hours • Paid time off • Remote work options