Cyber Security Operations Specialist

About the role

The Cyber Security Operations Specialist protects the organization’s information systems and data from cyber threats. You will monitor networks, investigate incidents, and implement security measures to ensure a resilient security posture.

Key responsibilities

• Continuously monitor security systems and networks for unusual activity or potential threats.
• Analyze security alerts and logs, identify incidents, and coordinate response actions.
• Investigate breaches to determine cause, impact, and remediation steps.
• Maintain an audit‑ready Incident Response Plan with severity matrix, escalation paths, and evidence handling.
• Own a version‑controlled repository of actionable playbooks (phishing, ransomware, credential theft, etc.).
• Ensure comprehensive log collection from servers, cloud apps, domain controllers, firewalls, and email gateways.
• Build smart alert rules based on MITRE ATT&CK to reduce false positives.
• Create dashboards and weekly reports on detection and response metrics.
• Stay updated on emerging threats, vulnerabilities, and attack vectors.
• Utilize threat intelligence and hunting techniques to improve security posture.
• Collaborate with technology teams, management, and external partners.
• Participate in security audits, assessments, and forensic analyses.

Required profile

• 3‑5 years of experience in security operations or threat hunting.
• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• Relevant certifications (e.g., Microsoft Certified Security Operations Analyst Associate, CompTIA CySA+, Certified SOC Analyst, ECIH) are a plus.
• Strong analytical and problem‑solving abilities.

Required skills

• Proficiency with security tools such as SIEM, IDS/IPS, and firewalls.
• Knowledge of networking protocols and architecture.
• Familiarity with Windows and Linux operating systems.
• Experience with cloud environments and log management.
• Understanding of MITRE ATT&CK framework and threat hunting techniques.
• Incident response and forensic analysis capabilities.