Information Security Specialist

Role & responsibilities

Job Summary

We are looking for an experienced Information Security Specialist with 3 TO 6 years of expertise in cybersecurity operations, risk management, vulnerability management, and incident response. The ideal candidate will be responsible for protecting the organization's information assets by implementing security controls, monitoring threats, responding to incidents, and ensuring compliance with security standards and regulatory requirements.

Key Responsibilities

Monitor and analyze security events and alerts using SIEM, EDR, and other security monitoring tools.

Investigate, respond to, and document security incidents, coordinating with internal teams to ensure timely resolution.

Perform vulnerability assessments, risk analysis, and coordinate remediation activities.

Conduct periodic security assessments of servers, endpoints, applications, and cloud environments.

Implement and maintain security controls across network, endpoint, email, identity, and cloud platforms.

Support security governance activities by maintaining security policies, standards, and procedures.

Assist with compliance initiatives, audits, and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, GDPR, or applicable industry standards.

Collaborate with IT, Infrastructure, Cloud, and Application teams to ensure security best practices are incorporated into technology solutions.

Perform user access reviews, identity and access management activities, and privileged access monitoring.

Participate in threat hunting, security monitoring, and continuous improvement of security operations.

Conduct security awareness initiatives and provide guidance on cybersecurity best practices.

Maintain documentation, incident reports, risk registers, and remediation tracking.

Required Skills

3 TO 6 years of experience in Information Security or Cybersecurity.

Strong understanding of information security principles, risk management, and security best practices.

Hands-on experience with SIEM solutions such as Microsoft Sentinel, Splunk, IBM QRadar, or LogRhythm.

Experience with endpoint security solutions such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.

Knowledge of vulnerability management tools including Qualys, Nessus, or Rapid7.

Good understanding of network security concepts including TCP/IP, DNS, VPN, firewalls, IDS/IPS, and web security.

Experience with cloud security concepts in AWS, Azure, or Google Cloud Platform.

Familiarity with Identity and Access Management (IAM), Multi-Factor Authentication (MFA), and Active Directory.

Understanding of security frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, and MITRE ATT&CK.

Basic scripting knowledge using PowerShell, Python, or Bash is preferred.

Excellent analytical, problem-solving, communication, and documentation skills.

Preferred Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

Professional certifications such as CompTIA Security+, CEH, CySA+, SSCP, CISSP (Associate or Certified), Microsoft SC-200, AZ-500, or equivalent.

Experience working in enterprise environments with cloud and hybrid infrastructure.

Exposure to SOAR, DLP, CASB, or Zero Trust security architectures is an advantage.

Key Competencies

Strong analytical and investigative skills.

Ability to prioritize and respond effectively to security incidents.

Excellent collaboration and stakeholder management skills.

Strong attention to detail and documentation capabilities.

Ability to work independently and as part of a cross-functional team.

Continuous learning mindset with an interest in emerging cybersecurity threats and technologies.

Preferred candidate profile