Cyber Security Specialist

Educational qualifications

•Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Security, or a related field.

•Master's degree in Cyber Security, Information Security, or Technology Management is preferred.

•Relevant training in Identity Security, Active Directory Security, Threat Detection, or Microsoft Security technologies is highly desirable.

Work experience

•6–8 years of progressive experience in Cyber Security, Identity and Access Management (IAM), Security Operations, or Enterprise Infrastructure Security.

•Minimum 5 years of hands-on experience securing and administering large-scale Active Directory environments.

•Proven experience managing and optimizing Microsoft Defender for Identity (MDI) deployments in enterprise environments.

•Experience conducting Active Directory security assessments, attack path analysis, and remediation planning.

•Strong background in identity threat detection, incident investigation, and remediation coordination.

•Experience supporting audit, compliance, and regulatory requirements through security reporting and evidence collection.

•Experience working with cross-functional teams, including Security Operations, Infrastructure, Identity Management, Governance, Risk & Compliance (GRC), and Audit teams.

•Demonstrated experience driving security posture improvement initiatives and reducing identity-related risks across enterprise environments.

The ideal candidate will:

•Serve as a Subject Matter Expert (SME) for Active Directory and Identity Security, providing strategic guidance and technical leadership.

•Lead the identification and analysis of Active Directory vulnerabilities, security misconfigurations, privilege escalation paths, stale accounts, and domain controller security risks.

•Utilize Microsoft Defender for Identity to detect, investigate, and respond to identity-based threats and suspicious activities.

•Recommend and drive remediation actions to reduce the Active Directory attack surface and improve overall identity security posture.

•Support security operations teams in defending against credential theft, credential misuse, lateral movement, and privilege escalation attacks.

•Perform health checks, lifecycle management, and optimization of Defender for Identity sensors across the environment.

•Generate executive-level and operational reports for security teams, auditors, and leadership stakeholders.

•Partner with infrastructure teams to implement security best practices and strengthen identity governance controls.

•Drive continuous improvement initiatives focused on proactive threat detection, attack path reduction, privileged access security, and identity protection.

•Mentor junior analysts and contribute to the development of identity security standards, procedures, and operational playbooks.