Engineer, IT Security (Fresh Graduate)

Position Summary

The primary responsibility of this role is to support the day-to-day IT security operation and continuous improvement of the company’s cybersecurity environment, helping to protect our systems, infrastructure, users, and data from cybersecurity threats. The successful candidate will work closely with the IT teams on security monitoring, incident response, vulnerability management, access security, security controls, and compliance activities. This is an excellent opportunity to gain hands-on experience and build a strong foundation in enterprise cybersecurity. The ideal candidate should have a strong interest in cybersecurity, a willingness to learn, and the ability to work independently as part of a team.

Key responsibilities

• Monitor and investigate security alerts from SIEM, EDR/antivirus, DLP, firewalls, email security, and other security tools, performing initial triage and escalation where required.
• Support security incident response, including evidence collection, containment, investigation, documentation, and follow-up actions.
• Perform vulnerability scans, track security findings, and coordinate with system owners on patching and remediation.
• Assist in reviewing firewall rules, VPN, web filtering, endpoint security, and other security controls.
• Review and support user access, privileged account, MFA, and identity security reviews.
• Work with Infra Team hardening servers, network devices and cloud resources against security baselines (e.g. CIS Benchmarks).
• Maintain security documentation: policies, procedures, risk register.
• Support ISO 9000 & /IEC 27001 activities, internal audits and evidence collection for compliance.
• Assist with security awareness efforts such as phishing simulations and staff briefings.
• Monitor emerging cybersecurity threats and vulnerabilities and share relevant security advisories and recommendations with the team.

Requirements

• Bachelor’s Degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.
• Good understanding of cybersecurity fundamentals, including the CIA Triad, authentication, encryption, phishing, malware, ransomware, and common cyber threats.
• Basic networking, Windows and Linux knowledge: TCP/IP, ports and protocols, firewalls, VPN and network segmentation.
• Internship or project experience in a SOC, IT operations or security team.