Cyber Security Specialist

Job Responsibilities

• Monitor and protect the company's IT infrastructure, networks, systems, and applications against cybersecurity threats.
• Identify, assess, and manage security vulnerabilities, risks, and potential threats.
• Conduct regular security assessments, vulnerability scans, and penetration testing.
• Implement and maintain security policies, procedures, and best practices.
• Monitor security alerts, system logs, and network activities to detect suspicious behavior.
• Investigate security incidents, perform root cause analysis, and coordinate incident response and recovery.
• Implement and maintain security controls, including firewalls, endpoint protection, access controls, and intrusion detection systems.
• Conduct security audits and ensure systems comply with relevant security standards and internal policies.
• Support secure software development practices and conduct security reviews of applications, APIs, and system architecture.
• Manage identity and access controls, including user permissions, authentication, and privileged access.
• Perform risk assessments and recommend appropriate measures to strengthen the company's security posture.
• Coordinate with developers, system administrators, and other technical teams to address security issues.
• Assist with disaster recovery planning, data protection, backup security, and business continuity.
• Prepare security reports, document incidents, and maintain records of vulnerabilities and remediation activities.
• Keep up to date with emerging cyber threats, attack techniques, and security technologies.

Job Requirements

• Diploma or Degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Proven experience in cybersecurity, information security, network security, or a related technical role.
• Strong understanding of network protocols, operating systems, firewalls, VPNs, and network security principles.
• Knowledge of common cybersecurity threats, vulnerabilities, and attack techniques.
• Experience with security monitoring tools, SIEM platforms, vulnerability scanners, or endpoint detection and response (EDR) solutions.
• Familiarity with vulnerability assessment, penetration testing, and security incident response.
• Understanding of web application security, API security, authentication, and access management.
• Knowledge of security frameworks and standards such as ISO 27001, NIST, or CIS Controls.
• Familiarity with Linux, Windows Server, cloud security, and database security.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good documentation and communication skills.
• Able to work independently and collaborate with technical teams.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, CEH, CISSP, CISM, or equivalent.
• Experience with tools such as Burp Suite, Nessus, Nmap, Wireshark, Splunk, or Microsoft Sentinel.
• Knowledge of cloud security platforms such as AWS, Microsoft Azure, or Google Cloud.
• Experience in penetration testing, ethical hacking, threat hunting, or digital forensics.
• Familiarity with DevSecOps, secure coding practices, and security automation.
• Experience developing and implementing incident response plans.
• Knowledge of data privacy requirements and applicable cybersecurity regulations.

Key Skills

• Threat Detection and Analysis
• Vulnerability Assessment and Management
• Network and Application Security
• Security Incident Response
• Risk Assessment and Mitigation
• Security Monitoring and Reporting
• Problem-Solving and Critical Thinking
• Teamwork and Communication