About the role

Cybersecurity Specialist monitoring and responding to security threats in the Security Operations Centre. Collaborating with IT and production teams to enhance security measures and response times.

Responsibilities

Monitor and triage security alerts from SIEM/XDR tools, ensuring proper prioritization, documentation, and escalation.
Investigate security incidents (log analysis, event correlation, basic forensics) and coordinate containment and remediation.
Manage and maintain security operations (ticketing, incident tracking, reporting, and lessons learned).
Analyze phishing and suspicious activities and communicate directly with users when needed.
Maintain and optimize security tools (Microsoft Defender, Sentinel, Intune), ensuring proper configurations and log ingestion.
Contribute to SOC improvements (detection rules, playbooks, threat hunting, automation, performance metrics, audits, and collaboration).

Degree or diploma in cybersecurity, computer science, or equivalent experience, with a minimum 2 years in IT/security.
Hands-on experience with SIEM (preferably Microsoft Sentinel) and EDR/XDR tools.
Strong understanding of networking, systems (Windows/Linux), identity/access (Entra ID), and core security principles.
Knowledge of scripting (Python, PowerShell, KQL) and cloud environments (Azure/AWS).
Familiarity with security frameworks (MITRE ATT&CK, NIST), log analysis, and SOAR concepts is an asset.
Relevant certifications (Security+, SC-200, AZ-500, etc.) and flexibility for shifts or extended hours.
Passionate about security and technology, always staying up to date on new threats and trends.