Security Specialist job description

Develop and implement security policies, procedures, and standards to protect the organization's information systems and networks.

Conduct regular security audits, risk assessments, and vulnerability scans to identify potential security weaknesses and proactively address them.

Monitor and analyze security systems, including firewalls, intrusion detection systems, and antivirus software, to detect and respond to security incidents in a timely manner.

Investigate and resolve security incidents, including conducting forensic analysis, collecting evidence, and coordinating with relevant stakeholders.

Collaborate with the IT department to design and implement secure network architectures, data encryption, and access control mechanisms to safeguard sensitive data and systems.

Stay up-to-date with emerging security threats, industry trends, and best practices to continuously improve the organization's security posture.

Conduct security awareness training for employees to educate them about security risks, proper use of technology, and best practices for information security.

Participate in incident response activities, including creating and maintaining incident response plans, coordinating with internal and external stakeholders, and ensuring timely resolution of security incidents.

Perform regular security assessments of third-party vendors and partners to ensure they meet the organization's security requirements and standards.

Collaborate with internal teams to perform penetration testing and vulnerability assessments to identify and remediate security vulnerabilities and weaknesses.

____________________________________________________________________

Strong knowledge of information security principles, practices, and technologies.

Proficient in performing risk assessments and vulnerability scans.

Familiarity with security frameworks and standards such as ISO 27001, NIST, and PCI DSS.

Experience in configuring and managing security systems such as firewalls, intrusion detection systems, and antivirus software.

Knowledge of network protocols, routing, and switching.

Strong problem-solving and critical-thinking skills to identify and resolve security incidents.

Excellent communication skills to effectively collaborate with cross-functional teams and communicate security risks and recommendations to non-technical stakeholders.

Ability to work independently and manage multiple priorities in a fast-paced environment.

__________________________________________________________________

Bachelor's degree in Computer Science, Information Security, or a related field.

Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Security Manager (CISM) are highly desirable.

Proven experience in information security, including risk assessment, incident response, and security operations.

Knowledge of compliance requirements and regulations such as GDPR, HIPAA, or SOX.

Familiarity with security tools and technologies such as SIEM, IDS/IPS, and endpoint protection.

Understanding of encryption and cryptographic protocols.

Strong understanding of secure coding practices and web application security.

Ability to maintain confidentiality and handle sensitive information with integrity.