Cyber Security Specialist

About the role

We are looking for a hands‑on Cyber Security Specialist to lead penetration testing, security monitoring and vulnerability management across our enterprise environment. The role works closely with infrastructure, development and networking teams to strengthen the overall security posture.

Key responsibilities

• Conduct penetration testing and security assessments of web applications, APIs, networks, servers, Active Directory and other enterprise systems.
• Identify vulnerabilities, evaluate risk and exploitability, and provide practical remediation recommendations.
• Perform manual testing against OWASP Top 10 and OWASP API Security Top 10 risks.
• Monitor and investigate security events through SIEM platforms and develop detection rules, dashboards and use cases.
• Support incident investigation, response, containment, remediation and post‑incident improvement.
• Coordinate vulnerability management activities with infrastructure and development teams.
• Review and harden Microsoft Azure and AWS environments, including identity, network, logging and workload security controls.
• Strengthen Microsoft Active Directory and Entra ID security, covering privileged access, service accounts, authentication controls and Group Policy.
• Assist in implementing protective technologies such as endpoint security, web application firewalls and identity security controls.
• Participate in security reviews of new applications, systems and technology projects and support governance, risk assessments, policies and compliance activities.

Required profile

• Hands‑on experience implementing, administering or improving technical security controls in enterprise environments.
• Professional experience in penetration testing and vulnerability assessment.
• Strong understanding of web application, API, network, operating system and enterprise security.
• Experience with penetration testing tools such as Burp Suite, Nmap or Metasploit.
• Experience working with SIEM and security monitoring platforms (e.g., Wazuh, Microsoft Sentinel, Splunk).
• Experience investigating cybersecurity alerts and incidents.
• Experience with Microsoft Azure and/or AWS, including cloud identity, network, workload and logging security.

Required skills

• Penetration testing
• Vulnerability assessment
• Web application security
• API security
• Network security
• Operating system security
• Burp Suite
• Nmap
• Metasploit
• SIEM platforms (Wazuh, Microsoft Sentinel, Splunk)
• Microsoft Azure
• AWS
• Active Directory
• Entra ID
• Endpoint security
• Web Application Firewall (WAF)
• Identity security controls