Cyber Security Specialist

Role Overview

Cybersecurity Specialist

The ideal candidate will have a strong hands-on background in cybersecurity, ethical hacking, application security, and vulnerability assessment, with the ability to proactively identify security gaps and work with internal IT, development to implement corrective actions.

Key Responsibilities

• Security Assessment:

  Evaluate existing online assessment platforms, candidate onboarding tools, HR systems, and related applications to identify security vulnerabilities and potential threats.

• Ethical Hacking & Penetration Testing:

  Conduct authorized security testing, including web application penetration testing, API testing, authentication testing, and session management assessments.

• Vulnerability Management:

  Identify, document, prioritize, and track vulnerabilities based on severity, business impact, and exploitation risk.

• Risk Mitigation:

  Recommend and coordinate the implementation of security controls to address identified vulnerabilities and minimize security exposure.

• Application & Data Security:

  Assess risks associated with candidate personal information, assessment results, identity verification, document uploads, access permissions, and data storage or transmission.

• Access Control & Identity Management:

  Review role-based access controls, administrator privileges, vendor access, authentication mechanisms, and authorization workflows.

• Security Monitoring:

  Review available application logs, access logs, suspicious activities, and security alerts to identify potential misuse or unauthorized access.

• Third-Party Risk Assessment:

  Evaluate the security posture of assessment and onboarding technology vendors, including their security controls, data handling practices, and vulnerability management processes.

• Security Configuration Review:

  Assess application configurations, APIs, integrations, cloud environments, encryption practices, and other relevant security controls.

• Incident Response Support:

  Investigate reported security issues, support incident containment and root-cause analysis, and recommend preventive measures.

• Compliance & Documentation:

  Maintain vulnerability assessment reports, risk registers, remediation trackers, security recommendations, and evidence of closure.

• Continuous Improvement:

  Establish periodic security reviews and recommend improvements to strengthen the security of existing platforms and future technology implementations.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 4–8 years of hands-on experience in cybersecurity, ethical hacking, application security, or penetration testing.
• Practical experience conducting web application and API security assessments.
• Strong understanding of the OWASP Top 10, OWASP API Security Top 10, common attack vectors, and secure application design.
• Experience with tools such as Burp Suite, OWASP ZAP, Nmap, Nessus, OpenVAS, or equivalent security testing tools.
• Knowledge of authentication, authorization, session management, access control, encryption, and secure data transmission.
• Experience identifying vulnerabilities such as SQL injection, cross-site scripting (XSS), broken access control, insecure APIs, and security misconfigurations.
• Understanding of vulnerability scoring and prioritization frameworks such as CVSS.
• Ability to translate technical findings into actionable remediation plans for technical and non-technical stakeholders.
• Strong analytical, troubleshooting, documentation, and stakeholder coordination skills.