Specialist - Cybersecurity Operations

About This Role

Job description:

Job Purpose:

The Specialist – Cybersecurity Operations is responsible for supporting the daily operational activities of cybersecurity programs. This includes monitoring, detecting, analyzing, and responding to cybersecurity incidents, as well as managing vulnerability mitigation and implementing preventive controls to protect organizational assets. The role ensures adherence to internal policies, industry standards, and regulatory requirements, while collaborating with relevant teams to maintain and enhance the organization’s security posture.

Job Accountabilities:

• Document and escalate incidents that may cause immediate or ongoing impact.
• Support analysis of exercise results and provide input for improvements
• Provide timely detection, identification and alerting of possible attacks, anomalous activities and misuse activities and distinguish them from benign activities.
• Use cybersecurity tools and control technologies to monitor, detect, and reduce risks to acceptable levels.
• Analyze malicious activity to determine vulnerabilities exploited, exploitation methods and effects on system and information.
• Identify indications and warnings through research, analysis and correlation across multiple data sets.
• Report suspected cyber incidents in line with the organization's cyber incident response plan.
• Assess the adequacy of access controls against organizational policies.
• Monitor external data sources to keep understanding of currency of cybersecurity threats up to date and determine which security issues may have an impact on the organization.
• Assess and monitor the cybersecurity of the organization's system implementation and testing practices.
• Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.
• Assist in tuning and optimizing cyber defense tools
• Coordinate with other cyber defense staff to validate network alerts.
• Analyze log files from multiple sources to identify possible threats to network security.
• Make recommendations to enable effective remediation of vulnerabilities.
• Continuously monitors and assesses vulnerabilities across systems and network assets, ensuring timely identification, prioritization, and remediation based on risk and business impact.
• Supports patch management by coordinating timely deployment of security updates, monitoring compliance, and contributing to improving remediation processes in line with organizational policies and requirements.
• Support incident containment and recovery activities in coordination with relevant teams.
• Ensure incidents and vulnerabilities are handled within defined SLAs and operational targets.
• Supports the monitoring and security of the organization’s DNS infrastructure by analyzing traffic, detecting suspicious activity, and enforcing security controls, while investigating DNS-related incidents to ensure service integrity, availability, and resilience.

Qualifications & Experience:

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent
• A minimum of 3 – 5 years of experience in the same or similar field