Senior Security Specialist

Responsibilities : Execute core cybersecurity operations, including security monitoring, use case/content management, threat hunting, incident response, and remediation. Contribute to incident response planning and coordinate effective containment, eradication, and recovery actions. Review and assess existing and proposed system architectures, configurations, and designs to ensure compliance with security standards, controls, and baselines. Collaborate with HQ to conduct quarterly breach and attack simulations and continuously refine security controls to improve effectiveness. Support and coordinate with vendors on penetration testing activities, including scoping, execution, and remediation tracking. Assess proposed technology or process changes and implement action plans to enhance security posture, resilience, and risk mitigation. Design, implement, operate, and maintain security solutions across on-premises and cloud environments (e.g., M365 Conditional Access, Intune, endpoint protection, web and network security, perimeter defenses, and advanced detection tools) with minimal supervision. Drive continuous improvement of cybersecurity operations through process optimization, automation, and stakeholder engagement. Lead cybersecurity enhancement initiatives, including vendor evaluation, scope definition, business justification, contract review, negotiation, and procurement coordination. Develop and manage business plans, budgets, and resource forecasting for cybersecurity initiatives. Responsible for onboarding logs to SIEM solution. Perform patching and upgrade for syslog servers and SOAR servers. Mentor and guide junior cybersecurity team members to build capability and expertise. Define, execute, and communicate cybersecurity enhancement strategies using measurable objectives, performance tracking, and regular reporting. Requirements : Bachelor’s degree in computer science/cybersecurity. Minimal 8 years of work experience in security engineering or monitoring in information security division. Proven ability in managing SIEM, Log Management and SOAR solutions. Possess strong technical knowledge, technology integration and troubleshooting skills. Able to work independently and drive new initiatives proactively. Knowledge of modern cloud technology components and deployment patterns (Azure, AWS). Understand and familiar with securing On-Prem and cloud infrastructure. Possess relevant professional certifications such as CISSP, CCSP or GIAC certifications - GCIH, GNFA, GPEN, GCAD, GDSA. Ability to implement automation using script or via automation platforms such as SOAR, Power Automate is preferred. Proficient in written and oral English.