Threat Intelligence and Analysis: Identify, assess, and stay current on emerging threats and attack techniques to enhance our defensive strategies.
Supporting Security Incident Analysis and Response: Support, investigate and analyze security incidents to determine the root cause, scope, and impact.
Penetration Test Management: Assist in the planning, coordination, report writing and management of penetration testing activities to proactively identify and remediate security weaknesses.
Vulnerability Management: Participate in vulnerability scanning and assessment activities to identify weaknesses in our systems and applications. Assist in tracking and reporting on the remediation of identified vulnerabilities.
IT Security Dashboards: Maintain IT security dashboards to provide a clear and concise overview of our security posture and key metrics for stakeholders.
Security Tool Administration: Support the deployment, configuration, and maintenance of security tools and technologies.
Policy and Procedure Adherence: Help to ensure compliance with company security policies and procedures.
Fundamental understanding of networking concepts (e.g., TCP/IP, DNS, DHCP, routing, and switching).
Basic knowledge of operating systems (Windows, Linux).
Familiarity with common cybersecurity principles and best practices.
Knowledge of common web application vulnerabilities, such as the OWASP Top 10.
Exposure to security testing tools, such as but not limited to Burp suite, Nmap, Wireshark, Metasploit and Vulnerability scanners.
Strong analytical and problem-solving skills with a keen attention to detail.
Excellent written and verbal communication skills.
Ability to work effectively both independently and as part of a team.
A strong desire to learn and develop a career in cybersecurity.
Resourceful, flexible and capable of collaborating with multi-cultural environment
Available for travel for onsite support and training
Preferred Qualifications:
Relevant industry certifications such as CompTIA Security+, CompTIA Network+, or (ISC)² Associate.
Experience with a scripting language (e.g., Python, PowerShell).
Familiarity with cloud security concepts (Azure, or Google Cloud).
Knowledge of common attack vectors and mitigation techniques.
Experience with security information and event management (SIEM) tools.
