Cybersecurity Specialist

About the Role

The Cybersecurity Specialist is responsible for safeguarding enterprise systems, applications, and cloud environments through proactive security assessments, monitoring, and governance. This role involves conducting penetration tests, managing vulnerabilities, investigating security incidents, and implementing robust security controls across infrastructure, networks, and identities. The ideal candidate will possess deep technical expertise in cybersecurity, hands-on experience with SIEM platforms, and a strong understanding of cloud and enterprise security frameworks. The position requires collaboration with cross-functional IT teams to enhance the organization’s overall security posture and ensure compliance with cybersecurity standards and best practices.

Key Responsibilities

• check_circle Conduct penetration testing and security assessments of web applications, APIs, networks, servers, Active Directory environments, and enterprise systems.
• check_circle Identify vulnerabilities, assess risk and exploitability, and provide actionable remediation recommendations.
• check_circle Perform manual penetration testing aligned with OWASP Top 10 and OWASP API Security Top 10 risks.
• check_circle Monitor and investigate security events and alerts using SIEM and security monitoring platforms.
• check_circle Support incident investigation, response, containment, remediation, and post-incident improvement activities.
• check_circle Develop and optimize SIEM alerts, detection rules, dashboards, and monitoring use cases.
• check_circle Coordinate vulnerability management and remediation activities with infrastructure and development teams.
• check_circle Review and strengthen security configurations in Microsoft Azure, AWS, Active Directory, and Entra ID environments.
• check_circle Implement and operate protective technologies such as endpoint security, web application firewalls, and identity security controls.
• check_circle Participate in security reviews of new applications, systems, and technology projects.
• check_circle Support cybersecurity governance, risk assessments, policy development, compliance, and audit activities.
• check_circle Collaborate with IT teams to improve the organization’s overall cybersecurity maturity and resilience.

Qualifications

• check_circle Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• check_circle Hands-on experience in penetration testing, vulnerability assessment, and technical security control implementation.
• check_circle Proficiency with tools such as Burp Suite, Nmap, Metasploit, and SIEM platforms like Wazuh, Microsoft Sentinel, or Splunk.
• check_circle Strong understanding of web application, API, network, operating system, and enterprise security principles.
• check_circle Experience with Microsoft Azure and/or AWS cloud security, including identity, network, and workload protection.
• check_circle Knowledge of Windows, Linux, TCP/IP, authentication, and enterprise infrastructure.
• check_circle Good understanding of cybersecurity governance, risk management, and compliance frameworks.
• check_circle Expertise in Microsoft Active Directory and identity security concepts including Kerberos, NTLM, LDAP, and privileged access management.
• check_circle Preferred certifications: OSCP, OSWE, OSEP, or Hack The Box certifications such as CPTS, CWES, CBBH, CDSA, CWEE, CAPE, COAE.
• check_circle Additional certifications in cloud security, Microsoft security, incident response, or penetration testing are advantageous.
• check_circle Strong analytical, problem-solving, and communication skills with the ability to convey technical risks to diverse audiences.
• check_circle High professional ethics, confidentiality, and attention to detail.