Digital Security Specialist

Protect the Digital World from Threats

We are seeking a seasoned security expert to spearhead our efforts in securing IT infrastructure, conducting risk assessments, and implementing Microsoft security layers. The ideal candidate will be responsible for firewall and endpoint security, WAF implementation, VAPT, fraud investigation, dark web monitoring, brand monitoring, email security, and compliance enforcement.

Main Responsibilities:

• Secure IT Infrastructure: Design, configure, and manage firewalls (Palo Alto, Fortinet, Cisco ASA, Check Point) to ensure robust network security.
• Implement Endpoint Security: Deploy and maintain Web Application Firewalls (WAF) for web security (Cloudflare, Imperva, AWS WAF), implement Endpoint Detection & Response (EDR) solutions like Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, and enforce Zero Trust principles.
• Email Security: Configure and manage Microsoft Defender for Office 365 to protect against phishing, malware, and email threats, implement Safe Links, Safe Attachments, and Anti-Phishing policies, monitor and respond to email security alerts in Microsoft Security Portal, and conduct email security threat hunting using Defender for O365 and advanced hunting queries.
• Fraud Investigation: Investigate fraud incidents, phishing attempts, and business email compromise (BEC), conduct forensic analysis on compromised endpoints, servers, and email accounts, develop and implement threat intelligence and threat hunting processes, and work closely with SOC teams for incident response and mitigation.
• Compliance Enforcement: Ensure compliance with industry standards such as ISO 27001, NIST, CIS, PCI-DSS, GDPR, and other regulatory requirements by developing and enforcing security policies, standards, and procedures, implementing Zero Trust Architecture and IAM policies, conducting security awareness training and phishing simulations.

Requirements:

• Technical Skills: Firewall & Network Security: Palo Alto, Fortinet, Cisco ASA, Check Point; Microsoft Security Stack: Defender for Endpoint, Defender for Office 365, Intune, Purview Compliance; Endpoint Security & EDR: Microsoft Defender, CrowdStrike, SentinelOne; WAF & Web Security: Imperva, AWS WAF, Akamai, Cloudflare; VAPT & Red Teaming: Burp Suite, Nessus, Metasploit, Kali Linux, OWASP ZAP; SIEM & Threat Intelligence: Microsoft Sentinel, Splunk, QRadar, ELK Stack, MITRE ATT&CK; Cloud Security: Azure Security Center, AWS Security Hub, GCP Security Command Center; IAM & Zero Trust: Okta, Microsoft Entra ID, Conditional Access Policies, PAM; Dark Web & Brand Monitoring: Recorded Future, Digital Shadows, Microsoft Defender Threat Intelligence.
• Soft Skills: Strong analytical and problem-solving skills, excellent communication and stakeholder management abilities, ability to work independently and in cross-functional teams, proactive security mindset with attention to detail.

Certifications (Preferred): CISSP – Certified Information Systems Security Professional, CEH – Certified Ethical Hacker, OSCP – Offensive Security Certified Professional, CISM/CISA – Certified Information Security Manager/Auditor, Microsoft Certified: Cybersecurity Architect (SC-100), Microsoft Certified: Security Operations Analyst (SC-200), Microsoft Certified: Information Protection Administrator (SC-400).

Experience Required: 5+ years of experience in IT Security, Cybersecurity, and Threat Intelligence, hands-on expertise in firewall management, endpoint security, WAF, email security, and compliance, strong experience in fraud investigation, dark web monitoring, and brand protection, proven ability to secure cloud, hybrid, and on-premise environments.