- Monitor and respond to security incidents, alerts, and threats across the organization.

- Conduct vulnerability assessments, risk analysis, and security audits.

- Implement and maintain security tools such as firewalls, antivirus, SIEM, IDS/IPS, and endpoint protection solutions.

- Develop, review, and enforce information security policies, standards, and procedures.

- Ensure compliance with security frameworks and regulations such as ISO 27001, GDPR, SOC 2, or PCI-DSS.

- Perform security assessments for applications, infrastructure, and cloud environments.

- Collaborate with IT and business teams to identify and mitigate security risks.

- Support incident response activities including investigation, containment, recovery, and reporting.

- Conduct user awareness and cybersecurity training programs.

- Maintain documentation related to security controls, incidents, and audit findings.

- Stay updated with emerging cybersecurity threats, technologies, and best practices.

Required Skills & Qualifications :

- Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field.

- 2 to 6 years of experience in information security or cybersecurity roles.

- Strong understanding of network security, endpoint security, cloud security, and risk management.

- Experience with security monitoring and incident management tools.

- Knowledge of operating systems, networking concepts, and security protocols.

- Familiarity with vulnerability management and penetration testing concepts.

- Understanding of compliance and governance standards.

- Strong analytical, troubleshooting, and problem-solving skills.

- Excellent communication and documentation abilities.

Preferred Certifications :

- CEH (Certified Ethical Hacker)

- CISSP (Certified Information Systems Security Professional)

- CISM (Certified Information Security Manager)

- CompTIA Security+

- ISO 27001 Lead Auditor/Implementer

Preferred Technical Skills :

- SIEM tools (Splunk, QRadar, Sentinel, etc.)

- Firewall and VPN management

- Cloud platforms such as AWS, Azure, or GCP

- Endpoint Detection & Response (EDR) tools

- Identity and Access Management (IAM)

- Basic scripting knowledge (Python, PowerShell, Bash)

Soft Skills :

- Attention to detail

- Ability to work under pressure

- Team collaboration and coordination

- Strong decision-making and incident handling capabilities