Cyber Security Specialist

About the role

We are looking for a Cyber Security Specialist to protect our digital environment by managing firewalls, monitoring security events, and ensuring compliance with national cyber standards. The role combines hands‑on technical work with strategic reporting to keep our infrastructure secure.

Key responsibilities

• Manage and harden Sophos XGS firewall, including rule sets, IPS, and web/app control.
• Monitor SIEM platforms, investigate incidents, and execute response plans.
• Conduct vulnerability scans, track remediation, and close findings.
• Secure Microsoft 365 services – Defender, Exchange Online Protection, DLP, and Purview.
• Enforce VPN controls, MFA, and least‑privilege access policies.
• Manage endpoint protection (EPP/EDR) and oversee SSO/identity health.
• Respond to internal and external audits, maintain SOPs and security baselines.
• Produce security reports and 90‑day roadmaps for management.
• Ensure adherence to NCA Cybersecurity Controls.

Required profile

• Proven experience managing Sophos XGS firewalls.
• Hands‑on experience with SIEM monitoring and incident response.
• Background in vulnerability scanning and remediation tracking.
• Familiarity with Microsoft 365 security tools (Defender, EOP, DLP, Purview).
• Knowledge of VPN, MFA, and least‑privilege access implementations.
• Experience with endpoint protection platforms (EPP/EDR) and identity management.
• Ability to support audits and maintain security SOPs.
• Understanding of NCA Cybersecurity Controls.

Required skills

• Sophos XGS firewall
• Security Information and Event Management (SIEM)
• Vulnerability scanning tools
• Microsoft 365 Defender
• Exchange Online Protection
• Data Loss Prevention (DLP)
• Microsoft Purview
• VPN technologies
• Multi‑Factor Authentication (MFA)
• Least‑privilege access controls
• Endpoint Protection Platform (EPP)
• Endpoint Detection and Response (EDR)
• Single Sign‑On (SSO) and Identity Management
• NCA Cybersecurity Controls