Cyber Security Expert

Job Description

We are seeking an experienced Cyber Security Expert to join our security team. You will be responsible for protecting our systems, networks, and data from cyber threats, implementing security measures, and ensuring compliance with security standards and regulations.

Key Responsibilities

• Design, implement, and maintain security measures and controls
• Conduct regular security assessments and vulnerability testing
• Monitor networks and systems for security breaches and investigate incidents
• Implement and manage security tools (firewalls, intrusion detection systems, antivirus software)
• Develop and enforce security policies and procedures
• Conduct security awareness training for employees
• Perform risk assessments and develop risk management strategies
• Ensure compliance with security standards (ISO 27001, NIST, GDPR)
• Respond to security incidents and conduct forensic analysis
• Stay updated with the latest security threats and trends

Requirements

• 4+ years of experience in cyber security or information security
• Strong knowledge of network security, application security, and cloud security
• Experience with security frameworks (NIST, ISO 27001, CIS Controls)
• Proficiency in security tools (SIEM, IDS/IPS, vulnerability scanners)
• Knowledge of penetration testing and ethical hacking techniques
• Understanding of cryptography and encryption technologies
• Experience with incident response and digital forensics
• Familiarity with compliance requirements (GDPR, HIPAA, PCI DSS)
• Strong analytical and problem-solving skills
• Excellent communication and documentation skills

Nice to Have

• Relevant certifications (CISSP, CISM, CEH, CompTIA Security+)
• Experience with cloud security (AWS, Azure, GCP)
• Knowledge of scripting languages (Python, Bash, PowerShell)
• Experience with security automation and orchestration
• Familiarity with DevSecOps practices
• Experience with threat intelligence platforms
• Knowledge of mobile security and IoT security
• Experience with security in containerized environments
• Understanding of zero-trust architecture