Cyber Security Specialist

We are seeking a Cybersecurity Specialist to protect organizational systems, networks, and data from security threats. This role monitors for and responds to security incidents, implements security controls, and supports the organization's overall security posture and compliance with relevant standards and regulations.

Key Responsibilities

• Monitor networks, systems, and applications for security threats, vulnerabilities, and anomalous activity
• Investigate and respond to security incidents, performing root-cause analysis and remediation
• Conduct vulnerability assessments and coordinate/support penetration testing activities
• Implement and maintain security controls (firewalls, IDS/IPS, endpoint protection, identity and access management)
• Develop, review, and maintain security policies, standards, and procedures
• Support security awareness training and phishing simulation programs for employees
• Perform risk assessments on systems, applications, and third-party vendors
• Support compliance efforts related to relevant security frameworks and regulations (e.g., SOC 2, ISO 27001, NIST, PCI-DSS, GDPR, HIPAA as applicable)
• Manage and tune security monitoring tools (SIEM, endpoint detection and response, threat intelligence platforms)
• Participate in incident response planning, tabletop exercises, and disaster recovery/business continuity efforts
• Collaborate with IT, engineering, and compliance teams to embed security best practices into systems and processes
• Stay current with emerging threats, attack techniques, and security technologies

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience)
• Experience in a cybersecurity, information security, or IT security role
• Understanding of core security domains (network security, endpoint security, identity and access management, incident response)
• Familiarity with security tools such as SIEM, firewalls, IDS/IPS, and vulnerability scanners
• Understanding of common threat vectors, attack techniques, and security frameworks (e.g., MITRE ATT&CK)
• Strong analytical and problem-solving skills for investigating and responding to incidents
• Strong written and verbal communication skills for documenting incidents and communicating risk to stakeholders

Preferred Qualifications

• Security certifications (e.g., CISSP, CISM, Security+, CEH, GIAC/GSEC)
• Experience with cloud security (AWS, Azure, GCP) and cloud-native security tools
• Experience with compliance frameworks relevant to the industry (SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR)
• Experience with penetration testing or red team/blue team exercises
• Familiarity with scripting/automation for security tooling (Python, PowerShell, Bash)
• Prior experience in a regulated industry (financial services, healthcare, pharma)

Core Competencies

• Strong analytical and investigative mindset
• Ability to work under pressure during active security incidents
• Cross-functional collaboration with IT, engineering, and compliance teams
• Attention to detail and a proactive, risk-aware approach
• Clear written and verbal communication, including with non-technical stakeholders