Cybersecurity Specialist

Job Description:

• Design, harden, and maintain security architectures across cloud (Alibaba/GCP/Tencent) and on-premise networks, servers, databases, and applications.

• Implement and manage core security technologies, including Firewalls, SIEM, EDR/XDR, IAM, and Data Loss Prevention (DLP).

• Execute routine Vulnerability Assessments and Penetration Testing (VAPT) across web applications, APIs, and network infrastructure.

• Analyze vulnerability scan reports, prioritize risks based on impact, and partner with DevOps and System Engineering teams for timely remediation.

• Monitor security telemetry and log data to detect, analyze, and neutralize threats in real time.

• Lead end-to-end Incident Response procedures, conduct digital forensics, and produce thorough post-mortem root-cause analysis reports.

• Perform security code reviews, threat modeling, and pre-deployment security audits for new features and system releases.

• Ensure operational alignment with global and local cybersecurity standards (ISO/IEC 27001, NIST, and local data protection laws).

• Draft, update, and maintain Standard Operating Procedures (SOPs), Disaster Recovery Plans (DRP), and Business Continuity Plans (BCP).

• Conduct organization-wide Security Awareness training and periodic simulated phishing campaigns to build a security-first culture.

Qualifications:

• Bachelor’s degree in Information Security, Computer Science, IT, or a related field.

• 3–5+ years of hands-on experience in Information Security, Cybersecurity Engineering, or SOC Operations.

• Experience with both cloud platforms and on-prem environments.

• Hands-on experience with SIEM/SOC tools, endpoint security, firewalls, and log analysis.

• Deep understanding of networking protocols (TCP/IP, DNS, VPN, SSL/TLS) and architecture design.

• Familiarity with vulnerability scanning and remediation workflows.

• Basic understanding of cybersecurity frameworks (NIST, CIS, ISO 27001).

• Strong analytical and troubleshooting mindset when responding to active security incidents.

• Clear communication skills to explain complex technical risks to executive and non-technical stakeholders.