IT Cybersecurity Specialist / Cybersecurity Consultant

Job Summary

We are seeking an experienced IT Cybersecurity Specialist with 10+ years of professional experience in cybersecurity, penetration testing, vulnerability assessment, and security remediation. The ideal candidate will have strong hands-on expertise in identifying security vulnerabilities, conducting penetration tests and vulnerability scans, assessing security risks, and implementing effective remediation strategies. Candidates should hold relevant industry certifications such as CISSP, CEH, OSCP, CISM, or equivalent.

Key Responsibilities

• Conduct penetration testing across networks, applications, systems, APIs, and infrastructure.
• Perform vulnerability assessments and vulnerability scans using industry-standard tools.
• Identify, validate, and prioritize security vulnerabilities based on risk and business impact.
• Develop detailed vulnerability and penetration testing reports with clear remediation recommendations.
• Work with IT and development teams to remediate identified vulnerabilities and security weaknesses.
• Validate remediation efforts through follow-up testing and security assessments.
• Perform security assessments of network infrastructure, servers, endpoints, applications, and cloud environments.
• Analyze security configurations and identify weaknesses, misconfigurations, and potential attack vectors.
• Support incident investigation and provide technical recommendations to strengthen security controls.
• Maintain knowledge of current cybersecurity threats, vulnerabilities, attack techniques, and security best practices.
• Assist with developing and improving cybersecurity policies, procedures, and security controls.
• Provide technical guidance to internal teams regarding vulnerability management and security remediation.

Required Qualifications

• 10+ years of experience in IT Cybersecurity / Information Security.
• Demonstrated hands-on experience in penetration testing and vulnerability assessment.
• Strong understanding of vulnerability management and security remediation.
• Ability to independently identify security issues and recommend practical remediation solutions.
• Experience with vulnerability scanning and penetration testing tools such as Nessus, Qualys, Burp Suite, Nmap, Metasploit, OpenVAS, or equivalent.
• Strong knowledge of networking, operating systems, web applications, databases, and security technologies.
• Understanding of common vulnerabilities and attack methodologies, including OWASP Top 10, CVEs, CVSS, privilege escalation, authentication weaknesses, and misconfigurations.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills.

Certifications

• CISSP
• CEH
• OSCP
• CISM
• CompTIA Security+
• GIAC certifications
• CREST certifications
• Other recognized cybersecurity certifications

CISSP, OSCP, CEH, or equivalent advanced certification is highly preferred.

Preferred Skills

• Penetration Testing
• Vulnerability Assessment
• Vulnerability Management
• Security Remediation
• Network Security
• Web Application Security
• Cloud Security
• API Security
• OWASP
• CVE / CVSS
• Security Auditing
• Risk Assessment
• Incident Response
• Security Tools Technologies