Cybersecurity Specialist

About the Role
The position focuses on implementing IT risk management and security controls while fulfilling and adhering to IT security standards, policies, and procedures. The role involves conducting internal security audits and preparing for external audits. Additionally, you will manage IT security operations related to threat prevention, detection, and remediation. This involves assessing security gaps within the technology landscape and processes to develop an effective security solutions roadmap. You will also perform related duties as assigned by your Direct Manager.

Responsibilities

• Implement IT risk management and security controls.
• Fulfill and implement the requirements of IT security standards, policies, and procedures.
• Conduct internal security audits and facilitate external audits.
• Manage IT security operations in threat prevention, detection, and remediation.
• Assess security gaps in the technology landscape and processes to shape the security solutions roadmap.
• Perform related duties as assigned by the Direct Manager.

Requirements

Education/Qualifications

• Bachelor Degree or Advanced Diploma in Computer Science, Computer Engineering, IT, or a relevant field.
• Certification in one or more of the following: CompTIA CySA/Security+, SSCP, CISSP, CISA, CISM, OSCP, CEH, and related certifications.
• Additional certifications in Microsoft Azure cloud security (e.g., SC-900, SC-500, SC-300), vendor security solutions, ITIL, and cybersecurity standards are advantageous.

Work Experience

• Over 3 years in cybersecurity with hands-on experience implementing and operating in areas such as:
  • Information classification and Data Loss Prevention (DLP)
  • Identity and Privileged Access Management (IAM/PAM)
  • Advanced experience with FortiGate and Palo Alto firewalls
  • WAF, network segmentation, VPN, PKI, and NAC
  • SIEM, SOAR, UEBA, and SOC operations
  • Cloud and email security
  • Vulnerability management
  • Ethical hacking
  • Security standards and compliance

Knowledge

• LAN/WLAN/WAN/SDWAN
• Microsoft Active Directory and group policy
• Cloud technology
• Windows server, endpoint OS, Android, iOS, and MacOS
• OWASP Security Knowledge Framework, Mitre Att&Ck® Matrix, CIS Benchmarks
• ISO27001, NIST, NESA

Skills

• Risk management
• Threat hunting
• Project management
• Virtualization
• Office365