Cybersecurity Specialist

About the role

Consultec is looking for a Cybersecurity Specialist to protect its systems, applications, infrastructure and data. You will work remotely with international teams, using your technical expertise and analytical mindset to identify risks, investigate incidents and implement security controls.

Key responsibilities

• Monitor, identify, analyse and respond to cybersecurity threats, vulnerabilities and incidents.
• Assess security risks across applications, infrastructure, networks, cloud environments and endpoints.
• Implement and maintain security controls, policies, standards and procedures.
• Perform vulnerability assessments and coordinate remediation with IT, development and DevOps teams.
• Analyse security alerts from SIEM, EDR, firewalls, IDS/IPS and other platforms.
• Support incident response activities, including investigation, containment, remediation and post‑incident analysis.
• Review system configurations and recommend hardening measures.
• Assist with identity and access management, including authentication, authorization and privileged access controls.
• Participate in security reviews for applications, APIs, infrastructure and cloud environments.
• Support secure software development practices and collaborate with developers to remediate security risks.
• Monitor compliance with cybersecurity policies, standards and regulatory requirements.
• Prepare technical and executive security reports and contribute to security awareness initiatives.

Required profile

• Minimum 3 years of experience in cybersecurity, information security or related fields.
• Strong understanding of cybersecurity principles, threat landscape, vulnerability management and risk assessment.
• Advanced English proficiency (C1 level) for frequent communication with global teams and clients.

Required skills

• SIEM platforms – Microsoft Sentinel, Splunk, QRadar or similar.
• EDR/XDR solutions – Microsoft Defender, CrowdStrike, SentinelOne or similar.
• Firewalls, IDS/IPS, VPNs, network segmentation and general network security concepts.
• Vulnerability management tools – Nessus, Qualys, OpenVAS or similar.
• Knowledge of CVSS scoring and prioritisation.
• Windows and Linux security hardening.
• Cloud security practices for Azure, AWS and/or GCP.