• Provide first-line support and daily operational management for enterprise cybersecurity systems, including security devices (e.g., firewalls, IDS/IPS, SIEM) and security platforms.

• Troubleshoot and resolve security-related incidents, vulnerabilities, and technical issues across network infrastructure, endpoints, and server environments.

• Monitor real-time security alerts, system logs, and network traffic to detect, analyze, and respond to potential cyber threats—ensuring continuous visibility and improvement of the organization’s security posture.

• Assist in the deployment, configuration, firmware/software upgrades, and performance optimization of security hardware and software solutions.

• Maintain comprehensive and up-to-date documentation—including security policies, device configurations, incident response playbooks, vulnerability assessment reports, and remediation records.

• Collaborate closely with internal IT teams and business units to implement security patches, risk mitigation strategies, and security enhancement initiatives aligned with organizational objectives.

• Deliver security awareness training and hands-on technical guidance to end-users and stakeholders to promote secure operational behaviors and compliance awareness.

• Respond promptly and effectively to internal security inquiries and emergency incidents—including escalation handling, root cause analysis, containment, eradication, and recovery activities.

• Ensure confidentiality, integrity, and availability (CIA triad) of enterprise data through implementation and maintenance of standardized access controls, encryption mechanisms, backup protection, and disaster recovery procedures.

Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).

• Minimum 3–5 years of professional IT experience, including at least 3 years focused on administration, operation, and support of large-scale enterprise security architectures.

• Strong understanding of core cybersecurity domains: network security (e.g., segmentation, ACLs, TLS), endpoint protection (EDR/XDR), data security (DLP, encryption), identity and access management (IAM), and security operations (SOC workflows).

• Familiarity with industry frameworks and standards such as NIST CSF, ISO/IEC 27001, and common compliance requirements (e.g., PDPO, GDPR principles).

• Proven ability to conduct security incident analysis, perform root-cause investigations, and apply structured problem-solving methodologies under time-sensitive conditions.

• Relevant professional certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are highly preferred.