Role Overview
We are looking for a Senior Information Security Specialist to strengthen our organization's security posture by implementing, monitoring, and maintaining cybersecurity controls, identifying vulnerabilities, and ensuring compliance with relevant security standards and regulatory requirements.
Key Responsibilities
- Monitor, investigate, and respond to cybersecurity incidents and security alerts.
- Identify, analyze, and mitigate potential security threats and vulnerabilities.
- Conduct threat hunting and security monitoring activities.
- Support the implementation and maintenance of security controls across infrastructure, cloud, and endpoint environments.
- Collaborate with internal teams to enhance security posture and ensure compliance with security standards and best practices.
- Participate in security assessments, incident investigations, and remediation activities.
- Contribute to the development and improvement of security processes, procedures, and response plans.
- Support Purple Team exercises and security validation initiatives to strengthen detection and response capabilities.
Requirements
- Bachelor's degree in Computer Science, or a related field.
- 5 years of experience in Information Security Operations, GRC Auditing, or a related GRC role.
- Strong experience in security monitoring, incident response, threat detection, and threat hunting.
- Experience working with SIEM, endpoint security, identity management, and cloud security solutions.
- Good understanding of network security concepts, including firewalls, VPNs, IDS/IPS, and access controls.
- Experience in vulnerability management and security hardening practices.
- Knowledge of cybersecurity frameworks, attack methodologies, and security best practices.
- Experience with Microsoft security technologies is highly preferred.