Job Description

Scope of Services

. Privileged Access Management, including CyberArk administration and operational support.

. Security monitoring platforms, including SIEM, database activity monitoring, network device log monitoring, and insider security monitoring.

. Data Loss Prevention, including Forcepoint administration, policy support, alert handling, and reporting.

. Web application and infrastructure security support, including Imperva WAF and related security technologies where assigned.

. Security team mailbox operations, including Vulnerability Watch, phishing reports, and other security notifications.

. Security-related virtual machines, Syslog-NG / log management services, Windows and Linux servers, and supporting cloud services in Microsoft Azure, Amazon Web Services, and Google Cloud Platform where applicable.

. Cybersecurity awareness communications, phishing simulation exercises, and staff awareness activities.

. Asset onboarding and inventory maintenance for central security monitoring tools, including servers, network devices, databases, cloud assets, and internet-facing services.

Key Responsibilities

. Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation.

. Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.

. Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.

. Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.

. Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with company procedures.

. Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorised by company.

. Coordinate with company and managed service providers, vendors, and external security partners on operational and incident matters.

. Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.

. Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports.

. Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.

. Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.

. Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.

. Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody and secure evidence handling.

. Perform other reasonable cybersecurity duties necessary to protect company information systems and infrastructure.

Deliverables and Reporting

. Operational health-check records and issue logs at frequencies.

. Bi-weekly operational status report covering incidents, alerts, outstanding actions, platform health, vulnerabilities, and service risks.

. Monthly service report and timesheet.

. Updated asset inventories, access records, runbooks, standard operating procedures, configuration records, and handover documentation.

. Incident, vulnerability, phishing exercise, audit, and management reports as requested.

. Knowledge-transfer sessions and complete handover documentation before replacement or contract end.

Experience and Qualifications

. Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.

. Min2-4 years of experience

. Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.

. Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.

. Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.

. Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills

. CyberArk Privileged Access Management.

. Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.

. Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
. Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.

. Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.

. Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.

. Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.