The Cybersecurity & Risk Management Professional role is designed for security-focused professionals who are passionate about protecting enterprise systems, networks, and digital assets from evolving cyber threats.
In this role, you will identify security vulnerabilities, monitor threat activities, manage risk mitigation strategies, and support incident response operations across complex IT environments. Additionally, you will collaborate with infrastructure teams, software engineers, network administrators, security analysts, and business stakeholders to strengthen the organization’s security posture.
Furthermore, this position provides hands-on exposure to Security Operations Center (SOC) activities, SIEM platforms, threat intelligence frameworks, incident response processes, network security technologies, endpoint protection solutions, and enterprise risk management practices.
As a result, this opportunity is ideal for professionals seeking to build expertise in cybersecurity operations, threat analysis, digital forensics, risk management, and enterprise defense strategies.
Key Responsibilities
Security Monitoring & Incident Response
- Monitor, investigate, and respond to security alerts generated by SIEM platforms and enterprise monitoring systems.
- Perform threat analysis, incident investigations, and root cause analysis for suspicious activities.
- Support incident response activities, including containment, eradication, recovery, and post-incident reviews.
- Monitor security logs, telemetry data, and performance metrics to improve threat detection capabilities.
Threat Intelligence & Risk Management
- Utilize Cyber Kill Chain and MITRE ATT&CK frameworks to assess security threats and risks.
- Research emerging cyber threats, attack techniques, and security trends.
- Identify security gaps and recommend remediation strategies.
- Implement risk mitigation plans to reduce organizational exposure to cyber threats.
Infrastructure & Network Security
- Manage and optimize security technologies such as Firewalls, WAFs, IDS/IPS, Proxy Servers, and Endpoint Protection platforms.
- Monitor Windows and Linux/UNIX environments for vulnerabilities and security misconfigurations.
- Analyze network traffic, packet flows, and communication protocols across multiple OSI layers.
- Investigate and secure VPN, DNS, SNMP, and related network services.
Collaboration & Compliance
- Work closely with infrastructure, development, and operations teams to strengthen security controls.
- Participate in Agile ceremonies, including sprint planning, daily stand-ups, and technical reviews.
- Conduct security assessments, vulnerability reviews, and compliance-related activities.
- Support governance initiatives and maintain security policies and operational standards.
Documentation & Continuous Improvement
- Develop and maintain security documentation, incident reports, and operational procedures.
- Assist in implementing monitoring frameworks, logging solutions, and security analytics tools.
- Support automation initiatives that improve security monitoring and incident response efficiency.
- Promote security awareness and cybersecurity best practices across the organization.
Key Skills
- Cybersecurity Operations, Security Monitoring, and Risk Management
- SIEM Administration, Alert Investigation, and Incident Analysis
- Security Operations Center (SOC), Threat Detection, and Incident Response
- Cyber Kill Chain, MITRE ATT&CK Framework, and Threat Intelligence
- Firewall Management, Web Application Firewalls (WAF), and IDS/IPS Technologies
- Endpoint Security, Anti-Malware Solutions, and Security Controls
- Windows Security, UNIX/Linux Administration, and System Hardening
- Network Security, OSI Model Fundamentals, and Protocol Analysis
- DNS, VPN, SNMP, and Secure Network Communications
- Log Analysis, Security Analytics, and Telemetry Monitoring
- Vulnerability Assessment, Risk Identification, and Remediation Planning
- Digital Forensics, Root Cause Analysis, and Security Investigations
- Security Architecture, Infrastructure Protection, and Compliance Practices
- Cloud Security Fundamentals across AWS, Azure, and Google Cloud Platforms
- Security Automation, Python Scripting, and Bash Scripting
- Security Documentation, Audit Support, and Governance Standards
- Threat Hunting, Security Research, and Emerging Threat Analysis
- Analytical Thinking, Problem Solving, and Critical Decision-Making
- Communication Skills, Stakeholder Collaboration, and Reporting
- Continuous Learning, Security Awareness, and Technology Adaptability
Education
- Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, Information Security, Engineering, or related technical disciplines.
- Master’s Degree in Cybersecurity, Information Security, Computer Science, or a related field is an added advantage.
- Professional certifications such as CEH, Security+, GCIH, CISSP, CISM, or equivalent cybersecurity credentials are highly desirable.
- Candidates with relevant practical experience, security projects, and demonstrated technical expertise will also be strongly considered.