Care Guide is hiring a full-time Network and Cybersecurity Engineer to own and strengthen the security of the systems the company runs on, including email, user accounts, devices, and cloud infrastructure.
This is a hands-on ownership role rather than a monitoring-only position. You will design security controls, implement them across the company, and maintain their effectiveness. You will work alongside the IT team and report to engineering leadership.
- Department: IT & Security
- Location: Gulshan, Mohakhali Road, Dhaka (on-site only)
- Employment Type: Full-Time
- Shift: Night Shift (7:00 PM – 4:00 AM)
- Experience Required: 3+ years in information security or IT security administration
- Salary: Based on Expertise
- Vacancy: 1
- Application Deadline: 30 November 2026
Key Responsibilities
Identity & Access Management
- Enforce multi-factor authentication (MFA) across all company accounts
- Administer a company-wide password manager and eliminate shared credentials
- Separate privileged administrator accounts from daily-use accounts
- Conduct quarterly access reviews and manage employee onboarding, role changes, and offboarding access procedures
- Implement least-privilege access across Google Workspace, Microsoft 365, AWS, and internal applications
Email & Endpoint Security
- Configure and maintain SPF, DKIM, and DMARC email authentication protocols, progressing DMARC policies to enforcement
- Configure anti-phishing and anti-spoofing protections and investigate suspicious or reported emails
- Deploy, configure, and manage endpoint detection and response (EDR) solutions and disk encryption across company devices
- Maintain an accurate device inventory and enforce security patching and remote-wipe capabilities
Compliance & Security Policy
- Maintain company security controls and prepare audit-ready documentation and evidence when required
- Conduct annual information security risk assessments and track remediation activities through completion
- Develop, implement, and maintain security policies covering acceptable use, access control, incident response, and data retention
- Perform security assessments of third-party vendors before onboarding
Security Monitoring & Incident Response
- Configure security logging, monitoring, and alerting across email, cloud infrastructure, and identity management systems
- Review and triage security alerts daily, including investigations of suspicious login attempts and unusual account activity
- Develop and maintain incident response procedures and lead post-incident reviews to identify improvements
- Verify backup integrity and conduct scheduled restoration tests to ensure business continuity and data recovery readiness
Security Awareness & Training
- Conduct quarterly phishing simulations and analyze results by department or team
- Provide security awareness training during employee onboarding and deliver annual refresher sessions
- Promote security best practices across the organization and help employees recognize and report potential threats
Requirements
Core Experience & Education
- Experience: 3–5 years in information security, IT security administration, or systems administration with responsibility for security
- Education: Bachelor's degree in Computer Science, Information Technology, or a related field
- Proven ability to independently implement, maintain, and improve organizational security controls
Platforms & Technical Skills
- Cloud Productivity Security: Experience administering Google Workspace or Microsoft 365 security controls, including MFA enforcement, conditional access, data loss prevention (DLP), and audit logging
- Identity & Access Management: Knowledge of Single Sign-On (SSO), least-privilege access design, account provisioning, and deprovisioning workflows
- Email Security: Practical experience configuring SPF, DKIM, and DMARC, including implementing DMARC enforcement policies
- Endpoint Security: Experience deploying EDR solutions, managing disk encryption, and enforcing operating system and application security patches
- Network Security: Understanding of firewalls, VPNs, network segmentation, and secure Wi-Fi configuration
Professional & Working Skills
- Ability to investigate suspected account compromises from initial detection through resolution and documentation
- Experience developing practical security policies that non-technical employees can understand and follow
- Strong analytical, troubleshooting, and incident investigation skills
- Excellent written and spoken English communication skills for coordination with U.S.-based stakeholders
- Ability to work independently, manage security priorities, and maintain accurate technical documentation
- Willingness to work the night shift (7:00 PM – 4:00 AM)
Nice-to-Have (Bonus Skills)
- Security Certifications: CompTIA Security+, SSCP, CySA+, GSEC, AWS Certified Security – Specialty, or equivalent certifications
- Compliance Frameworks: Experience working in regulated environments or familiarity with HIPAA, SOC 2, or ISO 27001
- AWS Security: Experience with IAM policy design, AWS CloudTrail, Amazon GuardDuty, and encryption key rotation
- Scripting & Automation: Ability to automate security administration and monitoring tasks using PowerShell, Bash, or Python
What We Offer
- Salary: Based on Expertise
- Full-time, fully on-site role in Mohakhali, Dhaka
- Full ownership of the company's security function, rather than responsibility for only one part of a larger security team
- Support for professional security certifications and technical training
- Practical exposure to U.S. security and compliance requirements
- Opportunity to design and strengthen security systems across company infrastructure and internal applications
Green Delta Tower: Green Delta AIMS Tower,
51 Bir Uttam AK Khandakar Rd, Mohakhali, Dhaka-1212
MS Center: 8 Bir Uttam AK Khandakar Rd,
Mohakhali, Dhaka 1212
Assure Center: 91 Mohakhali C/A,
Mohakhali, Dhaka 1212
Email: apply@careguidebd.com
WhatsApp +880 1911-948734 (Text Only)
