Graduate Specialist- Cyber Security

Job Description

We are looking for a Cybersecurity Professional to strengthen our security operations and safeguard our organization against evolving cyber threats. You will be responsible for monitoring, detecting, and responding to security incidents, as well as implementing preventive measures to improve our overall security posture.

You need to manage and optimize security tools, investigate potential threats, and collaborate with internal teams to ensure compliance, resilience, and readiness

Key Responsibilities

Email Security

- Manage and optimize Secure Email Gateway (SEG) solutions.
- Understand and implement email security protocols (SPF, DKIM, DMARC).
- Investigate and respond to email-based threats such as phishing, spoofing, and business email compromise.
- Work with internal teams to create awareness and train employees on phishing recognition and reporting.

Vulnerability & Patch Management

- Administer and support vulnerability management tools (e.g., InsightVM, Qualys, Nessus).
- Monitor infrastructure to ensure timely updates, patches, and preventive measures.
- Collaborate with IT teams to deploy and validate patches, reducing risk exposure.
- Track remediation progress and generate compliance and vulnerability reports for stakeholders.

Endpoint & Threat Management

- Manage and monitor Endpoint Detection & Response (EDR) tools (e.g., SentinelOne, CrowdStrike, Defender for Endpoint).
- Conduct threat hunting activities to proactively detect suspicious activity.
- Investigate and respond to security alerts, ensuring quick triage and escalation.
- Perform root cause analysis (RCA) of security incidents and recommend corrective actions.
- Fine-tune security tools for alert optimization and reduced false positives.

Incident Response & Monitoring

- Support incident response activities across the enterprise.
- Document incidents, lessons learned, and propose improvements to defenses.
- Monitor SIEM dashboards for anomalies, perform log analysis, and escalate threats as needed.
- Participate in security drills, tabletop exercises, and post-incident reviews.

Governance, Risk & Compliance

- Assist in maintaining compliance with ISO 27001, GDPR, NIST, or other frameworks as applicable.
- Contribute to internal and external security audits.
- Maintain security documentation, playbooks, and standard operating procedures (SOPs).

Continuous Improvement & Collaboration

- Stay updated on the latest cybersecurity threats, vulnerabilities, and best practices.
- Collaborate with cross-functional teams to improve security posture.
- Provide recommendations for enhancing security architecture and controls.
- Contribute to the development and automation of security workflows where possible.

Skills & Qualifications

- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
- 12 years of professional experience in cybersecurity operations or related roles.
- Hands-on experience with Secure Email Gateway (SEG) solutions.
- Strong understanding of email authentication protocols (SPF, DKIM, DMARC).
- Practical knowledge of vulnerability management tools (e.g., InsightVM, Qualys, Nessus).
- Experience with EDR platforms (e.g., SentinelOne, CrowdStrike, Microsoft Defender for Endpoint).
- Familiarity with SIEM tools (Splunk, Elastic, QRadar, etc.).
- Knowledge of incident response processes, threat hunting, and RCA.
- Strong analytical, problem-solving, and communication skills.
- Industry certifications (e.g., CompTIA Security+, Microsoft Security Operations Analyst, Splunk Core Certified User) are a plus.