Cyber Security Specialist

We are seeking a Cybersecurity Specialist to protect organizational systems, networks, and data from security threats. This role monitors for and responds to security incidents, implements security controls, and supports the organization's overall security posture and compliance with relevant standards and regulations. Key Responsibilities Monitor networks, systems, and applications for security threats, vulnerabilities, and anomalous activityInvestigate and respond to security incidents, performing root-cause analysis and remediationConduct vulnerability assessments and coordinate/support penetration testing activitiesImplement and maintain security controls (firewalls, IDS/IPS, endpoint protection, identity and access management)Develop, review, and maintain security policies, standards, and proceduresSupport security awareness training and phishing simulation programs for employeesPerform risk assessments on systems, applications, and third-party vendorsSupport compliance efforts related to relevant security frameworks and regulations (e.g., SOC 2, ISO 27001, NIST, PCI-DSS, GDPR, HIPAA as applicable)Manage and tune security monitoring tools (SIEM, endpoint detection and response, threat intelligence platforms)Participate in incident response planning, tabletop exercises, and disaster recovery/business continuity effortsCollaborate with IT, engineering, and compliance teams to embed security best practices into systems and processesStay current with emerging threats, attack techniques, and security technologies Required Qualifications Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience)Experience in a cybersecurity, information security, or IT security roleUnderstanding of core security domains (network security, endpoint security, identity and access management, incident response)Familiarity with security tools such as SIEM, firewalls, IDS/IPS, and vulnerability scannersUnderstanding of common threat vectors, attack techniques, and security frameworks (e.g., MITRE ATT&CK)Strong analytical and problem-solving skills for investigating and responding to incidentsStrong written and verbal communication skills for documenting incidents and communicating risk to stakeholders Preferred Qualifications Security certifications (e.g., CISSP, CISM, Security+, CEH, GIAC/GSEC)Experience with cloud security (AWS, Azure, GCP) and cloud-native security toolsExperience with compliance frameworks relevant to the industry (SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR)Experience with penetration testing or red team/blue team exercisesFamiliarity with scripting/automation for security tooling (Python, PowerShell, Bash)Prior experience in a regulated industry (financial services, healthcare, pharma) Core CompetenciesStrong analytical and investigative mindsetAbility to work under pressure during active security incidentsCross-functional collaboration with IT, engineering, and compliance teamsAttention to detail and a proactive, risk-aware approachClear written and verbal communication, including with non-technical stakeholders