IT Security Specialist

Responsibilities

• Monitor security activity, review alerts, and investigate suspicious behavior to identify and respond to potential threats.
• Support the full incident response lifecycle, including triage, containment, recovery coordination, and post-incident documentation.
• Use security tools, threat intelligence, and forensic techniques to analyze malicious activity and assist with cyber investigations.
• Maintain and improve response playbooks, operational procedures, dashboards, and reporting used to track security performance and incidents.
• Care for vulnerability management efforts by helping identify exposures, validating remediation, and confirming corrective actions are completed.
• Administer and support endpoint and network security technologies, including Fortinet solutions such as FortiGate, FortiManager, FortiAnalyzer, FortiAuthenticator, FortiClient, and FortiEMS.
• Review and verify secure settings across servers, user devices, cloud environments, and network components to promote compliance with security standards.
• Assist with risk reviews, audit preparation, evidence collection, and follow-up activities related to internal assessments, external audits, and regulatory examinations.
• Evaluate vendor and third-party security documentation, help document associated risks, and support ongoing due diligence and monitoring activities.
• Contribute to awareness initiatives, phishing exercises, tabletop sessions, and continuity testing while sharing insights on emerging cyber risks and improvement opportunities.

Requirements

• Experience in cybersecurity operations, incident response, vulnerability management, or a closely related information security function.
• Working knowledge of security monitoring, threat analysis, and investigation practices in enterprise environments.
• Familiarity with Fortinet technologies, including FortiGate, and the ability to support security platforms used for protection and visibility.
• Understanding of identity and access security concepts such as MFA, privileged access controls, and secure account governance.
• Knowledge of cybersecurity governance, data privacy, and database security principles.
• Ability to support audits, risk assessments, control reviews, and remediation tracking with strong attention to detail.
• Strong written and verbal communication skills for creating reports, documenting findings, and presenting risk information clearly.
• Experience working with security documentation, evidence management, and cross-functional coordination in a regulated environment is preferred.