Cybersecurity Specialist
Summary
Cybersecurity Specialist who designs and hardens security across cloud (Alibaba/GCP/Tencent) and on-premise infrastructure, runs VAPT and vulnerability remediation, monitors SIEM/EDR telemetry, and leads incident response and digital forensics. Also maintains compliance with ISO 27001/NIST and runs security awareness training.
Job Description:
Design, harden, and maintain security architectures across cloud (Alibaba/GCP/Tencent) and on-premise networks, servers, databases, and applications.
Implement and manage core security technologies, including Firewalls, SIEM, EDR/XDR, IAM, and Data Loss Prevention (DLP).
Execute routine Vulnerability Assessments and Penetration Testing (VAPT) across web applications, APIs, and network infrastructure.
Analyze vulnerability scan reports, prioritize risks based on impact, and partner with DevOps and System Engineering teams for timely remediation.
Monitor security telemetry and log data to detect, analyze, and neutralize threats in real time.
Lead end-to-end Incident Response procedures, conduct digital forensics, and produce thorough post-mortem root-cause analysis reports.
Perform security code reviews, threat modeling, and pre-deployment security audits for new features and system releases.
Ensure operational alignment with global and local cybersecurity standards (ISO/IEC 27001, NIST, and local data protection laws).
Draft, update, and maintain Standard Operating Procedures (SOPs), Disaster Recovery Plans (DRP), and Business Continuity Plans (BCP).
Conduct organization-wide Security Awareness training and periodic simulated phishing campaigns to build a security-first culture.
Qualifications:
Bachelor’s degree in Information Security, Computer Science, IT, or a related field.
3–5+ years of hands-on experience in Information Security, Cybersecurity Engineering, or SOC Operations.
Experience with both cloud platforms and on-prem environments.
Hands-on experience with SIEM/SOC tools, endpoint security, firewalls, and log analysis.
Deep understanding of networking protocols (TCP/IP, DNS, VPN, SSL/TLS) and architecture design.
Familiarity with vulnerability scanning and remediation workflows.
Basic understanding of cybersecurity frameworks (NIST, CIS, ISO 27001).
Strong analytical and troubleshooting mindset when responding to active security incidents.
Clear communication skills to explain complex technical risks to executive and non-technical stakeholders.