IT Security Specialist

About the role

The IT Security Specialist protects organizational systems by monitoring, detecting, investigating, and responding to security threats. The role supports compliance initiatives and drives continuous improvement of security operations within the IT Security team.

Key responsibilities

• Monitor security dashboards, alerts, and events; review and analyze threats, risks, and indicators of compromise.
• Coordinate with IT teams to investigate, contain, and resolve security incidents; manage incidents from identification to closure.
• Perform log review and analysis to support investigations and maintain operational visibility.
• Validate and close security tickets in the eService system, ensuring SLA compliance and proper documentation.
• Support vulnerability scanning, track remediation, and follow up on closure based on risk severity.
• Identify security gaps, enforce baselines, and support compliance with ISO 27001, SOC 2, PCI‑DSS, and CIS Controls.
• Assist in audit preparation, evidence collection, and control validation.
• Conduct regular reviews of wireless networks, endpoint alerts, firewall/VPN/proxy logs, and privileged access.
• Monitor patch compliance and coordinate with system owners for delayed updates.
• Participate in threat‑hunting using the MITRE ATT&CK framework and develop SIEM use cases, correlation rules, and alerts.
• Integrate and operationalize threat‑intelligence feeds and maintain security platforms (SIEM, EDR, email security, vulnerability tools).
• Monitor security events across cloud environments (AWS, Azure, GCP) and perform root‑cause analysis of recurring incidents.

Required profile

• Proven experience in security operations, incident response, and vulnerability management.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, PCI‑DSS, and CIS Controls.
• Ability to work with cross‑functional IT teams and follow documented processes.
• Strong analytical skills for threat analysis, log review, and root‑cause investigations.

Required skills

• SIEM platforms and use‑case development
• Endpoint Detection and Response (EDR) tools
• Email security and vulnerability management solutions
• Log analysis and correlation rule creation
• Threat hunting using MITRE ATT&CK
• Threat‑intelligence feed integration
• Cloud security monitoring (AWS, Azure, GCP)
• Vulnerability scanning and remediation tracking
• Patch management and compliance monitoring
• Firewall, VPN, and proxy log review
• Privileged access review and inactive account identification
• Root‑cause analysis and corrective action implementation