Cybersecurity Specialist

Job Description

Requirements

• Strong understanding of cybersecurity and information security concepts.
• Strong knowledge of networking, TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and common network protocols.
• Hands-on experience with Linux and Windows environments.
• Strong understanding of OWASP Top 10 and web application security.
• Experience with vulnerability assessment and penetration testing.
• Hands-on experience with tools such as Burp Suite, Nmap, Wireshark, Metasploit, Nessus/OpenVAS, and OWASP ZAP.
• Knowledge of API security and authentication mechanisms.
• Understanding of common vulnerabilities including SQL Injection, XSS, CSRF, SSRF, IDOR, authentication and authorization flaws.
• Scripting knowledge in Python, Bash, PowerShell, or similar languages.
• Experience with security monitoring and log analysis is preferred.
• Knowledge of cloud security platforms such as AWS or Azure is an advantage.
• Preferred Qualifications:
• 1+ years of relevant cybersecurity experience.
• CEH, Security+, OSCP, or other relevant certifications are an advantage.
• Experience working on real-world penetration testing or security assessment projects.
• Experience preparing professional security assessment and vulnerability reports.
• Experience working with development and IT teams to remediate security vulnerabilities.

Key Responsibilities

• Conduct vulnerability assessments and penetration testing of websites, applications, APIs, and networks.
• Identify, analyze, and prioritize security vulnerabilities and risks.
• Perform web application security testing based on OWASP standards.
• Conduct network security assessments and identify misconfigurations and security weaknesses.
• Monitor systems, applications, and network activity for potential security threats.
• Analyze security logs and investigate suspicious activities or incidents.
• Prepare detailed vulnerability assessment and penetration testing reports.
• Provide practical recommendations to resolve identified security issues.
• Work with developers and IT teams to implement security fixes.
• Conduct security audits and risk assessments.
• Assist in developing and implementing security policies, procedures, and best practices.
• Stay updated on new vulnerabilities, attack techniques, security tools, and cybersecurity trends.
• Assist with incident response and investigation when required.
• Ensure security testing and activities are properly documented.