IT Security Specialist – Cybersecurity Expert

About the role

We are looking for an experienced IT Security Specialist to strengthen our cybersecurity posture, protect critical assets, and ensure resilience against evolving threats. The role spans cloud and on‑premise environments, focusing on risk assessment, incident response, compliance, and continuous improvement of security controls.

Key responsibilities

• Act as custodian of IT security policies, ensuring implementation, periodic review and alignment with audit requirements.
• Manage and monitor security tools across cloud and on‑premise environments, including firewalls, IDS/IPS, SIEM, and backup solutions.
• Detect, investigate and respond to security incidents, perform log analysis and intrusion detection.
• Conduct vulnerability assessments, security testing and penetration testing of systems and applications.
• Configure, maintain and optimise security solutions such as firewalls, VPNs, anti‑malware, and WAFs.
• Collaborate with vendors, run PoCs and report findings to management.
• Prepare technical incident reports and support disaster recovery and business continuity planning.
• Continuously assess emerging threats and recommend mitigation actions.

Required profile

• Bachelor’s degree in Computer Engineering, IT or a related field.
• Relevant certifications preferred (CISSP, CISM, CEH) and vendor certifications (Cisco, Palo Alto, F5, Barracuda) a plus.
• Experience in SOC/CIRT/CERT/CSIRC environments or IT audit functions.
• Strong knowledge of security frameworks such as ISO 27001, NIST 800, COBIT.

Required skills

• IDS/IPS, SIEM, and Computer Network Defense tools.
• Wireshark, Nessus, Kali Linux, Burp Suite, Nmap.
• Microsoft security stack (Defender for Endpoint, Azure Sentinel, Microsoft 365 Security, Defender for Cloud).
• Azure Key Vault, HSM, BYOK encryption.
• Windows OS administration and hardening.
• Firewalls, WAF, VPNs, antivirus, network security controls.
• Cisco FTD, Palo Alto, Barracuda firewalls, NAC solutions.
• SIEM management, intrusion analysis, malware/virus outbreak handling.