IT Cybersecurity

Job Responsibilities

• Monitor and analyze security events from SIEM, Firewall, EDR/XDR, IDS/IPS, and other security tools.

• Perform security log analysis, incident investigation, containment, remediation, and recovery activities.

• Conduct proactive threat hunting and identify potential security threats across enterprise environments.

• Implement and maintain security hardening for servers, endpoints, networks, and cloud infrastructure.

• Perform Vulnerability Assessment & Penetration Testing (VAPT) on Web Applications, APIs, Servers, Networks, Wireless, and Active Directory environments.

• Identify security vulnerabilities and provide mitigation recommendations based on industry best practices.

• Prepare technical reports and executive summaries of security assessment results.

• Perform vulnerability validation and retesting after remediation.

• Collaborate with IT and Infrastructure teams to improve overall security posture.

• Develop security automation scripts to improve operational efficiency and incident response.

Requirements

• Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or related field.

• Minimum 3–5 years of experience in Cyber Security, Security Operations Center (SOC), Incident Response, Penetration Testing, or related roles.

• Strong knowledge of:

• Security Operations (SOC)

• Incident Response & Threat Hunting

• Vulnerability Assessment & Penetration Testing (VAPT)

• SIEM, EDR/XDR, IDS/IPS

• OWASP Top 10

• MITRE ATT&CK Framework

• CVE & CVSS

• Zero Trust Architecture

• Security Hardening

• Identity & Access Management (IAM)

Technical skills:

• Networking (TCP/IP, Routing & Switching, VLAN, Firewall, VPN, DNS, Reverse Proxy, Load Balancer)

• Linux & Windows Server Administration

• Active Directory

• VMware / Virtualization

• Docker & Container Technology

• Kubernetes (preferred)

• Cloud Platforms (AWS, Azure, or GCP)

Security tools:

• Splunk

• Google SecOps

• Wazuh

• Burp Suite

• OWASP ZAP

• Metasploit

• Nessus / OpenVAS

• Nmap

• Wireshark

• Nikto

Programming & Automation:

• Python

• Bash

• PowerShell

Experience preferred:

• Experience implementing and operating SIEM platforms.

• Hands-on experience in SOC operations and security monitoring.

• Experience conducting penetration testing and vulnerability assessments.

• Experience handling security incidents and threat hunting activities.

• Familiar with cloud security and enterprise infrastructure.

• Excellent analytical thinking, troubleshooting, and problem-solving skills.

• Strong communication, documentation, and teamwork abilities.

Professional certifications are an advantage:

• CEH

• eJPTOSCP

• CompTIA Security+

• Cisco CyberOps

• GIAC

• Microsoft SC-200 / SC-900

• ISO 27001 Awareness

Additional advantages:

• Experience participating in Bug Bounty programs.

• Active involvement in Capture The Flag (CTF) competitions.

• Participation in cybersecurity communities or research activities.