Cybersecurity Specialist

We are seeking a Cybersecurity Specialist to join the Consultec team. You are passionate about protecting systems, applications, infrastructure, and data from security threats. You combine strong technical knowledge with an analytical mindset and are comfortable identifying risks, investigating security events, implementing controls, and collaborating with technical and business teams to strengthen the organization’s security posture.

This is a remote position.

Advanced English proficiency (C1 level) is mandatory, as the role requires frequent communication and collaboration with international teams and clients.

You will:

• Monitor, identify, analyze, and respond to cybersecurity threats, vulnerabilities, and security incidents.

• Assess security risks across applications, infrastructure, networks, cloud environments, and endpoints.

• Implement and maintain security controls, policies, standards, and procedures.

• Perform vulnerability assessments and coordinate remediation activities with IT, infrastructure, development, and DevOps teams.

• Analyze security alerts and events generated by SIEM, EDR, firewalls, IDS/IPS, and other security platforms.

• Support incident response activities, including investigation, containment, remediation, and post-incident analysis.

• Review system configurations and identify opportunities for security hardening.

• Support identity and access management processes, including authentication, authorization, and privileged access controls.

• Participate in security reviews for applications, APIs, infrastructure, and cloud environments.

• Support secure software development practices and collaborate with development teams to identify and remediate security risks.

• Monitor compliance with cybersecurity policies, standards, and regulatory requirements.

• Prepare technical and executive security reports, including risks, vulnerabilities, incidents, and remediation progress.

• Support security awareness and cybersecurity best-practice initiatives.

• Contribute to the continuous improvement of security processes, controls, monitoring, and incident response capabilities.

• Collaborate with global teams, clients, and stakeholders on cybersecurity-related initiatives.

Ideally, you'd have:

• At least 3 years of relevant experience in cybersecurity, information security, infrastructure security, or a similar role.

• Strong understanding of cybersecurity principles, threats, vulnerabilities, and risk management.

• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or similar.

• Experience with EDR/XDR technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or similar.

• Knowledge of firewalls, IDS/IPS, VPNs, network segmentation, and network security principles.

• Experience with vulnerability management tools such as Nessus, Qualys, OpenVAS, or similar.

• Knowledge of vulnerability scoring and prioritization frameworks such as CVSS.

• Experience with Windows and Linux security and system hardening.

• Knowledge of cloud security practices across Azure, AWS, and/or GCP.

• Understanding of identity and access management, including Active Directory, Azure AD / Entra ID, SSO, MFA, OAuth 2.0, and privileged access management.

• Knowledge of application and API security principles, including OWASP Top 10.

• Familiarity with security frameworks and standards such as NIST, ISO 27001, CIS Controls, MITRE ATT&CK, and PCI DSS.

• Basic knowledge of scripting languages such as Python, Bash, or PowerShell is highly valued.

• Experience with incident response, threat analysis, and security monitoring.

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent attention to detail and ability to identify potential security risks.

• Ability to communicate security risks clearly to both technical and non-technical stakeholders.

• Ability to work independently and collaboratively within multidisciplinary teams.

• Experience working with distributed or global teams.

Certifications are a plus:

• CompTIA Security+

• CEH – Certified Ethical Hacker

• CISSP

• CISM

• Microsoft Security certifications

• AWS Security Specialty

• GIAC certifications