Cybersecurity Specialist

Position Overview:
The IT Cybersecurity Specialist is responsible for protecting the organization's information systems, networks, applications, and data from cyber threats while supporting a strong security posture across the enterprise. This role monitors security events, identifies vulnerabilities, implements security controls, and responds to security incidents. Working closely with infrastructure, application, and business teams, the IT Cybersecurity Specialist helps ensure that technology solutions are secure, compliant, and aligned with organizational policies and industry best practices.

In addition to day-to-day security operations, the IT Cybersecurity Specialist supports ongoing security awareness, risk management, compliance initiatives, and continuous improvement efforts. This role evaluates emerging threats, recommends security enhancements, assists with audits and assessments, and helps develop policies and procedures that reduce organizational risk.

ESSENTIAL FUNCTIONS:
Monitor security systems, alerts, and logs to identify, investigate, and respond to cybersecurity threats and security incidents.
Perform vulnerability assessments, coordinate remediation efforts, and verify that identified risks are resolved in a timely manner.
Administer and support cybersecurity technologies such as endpoint protection, email security, identity and access management, multi-factor authentication, SIEM, and vulnerability management platforms.
Develop, maintain, and enforce cybersecurity policies, standards, and procedures to protect organizational systems and data.
Support security awareness training initiatives and educate employees on cybersecurity best practices and emerging threats.
Participate in security audits, compliance assessments, risk evaluations, and disaster recovery/business continuity planning.
Collaborate with infrastructure, application development, and business teams to ensure security is integrated into technology projects and operational processes.
Develop and maintain cybersecurity standards for artificial intelligence (AI) technologies, including evaluating AI solutions, managing associated risks, protecting organizational data, and ensuring AI usage complies with security, privacy, and governance requirements.

KNOWLEDGE, SKILLS, AND ABILITIES:
Strong knowledge of cybersecurity principles, networking, operating systems, identity and access management, endpoint security, and cloud security concepts.
Ability to identify, analyze, and respond to security threats, vulnerabilities, and incidents using sound investigative and analytical techniques.
Experience with security technologies such as SIEM, EDR/XDR, firewalls, email security, vulnerability scanners, and multifactor authentication solutions.
Knowledge of cybersecurity frameworks and standards such as the NIST Cybersecurity Framework, CIS Controls, ISO 27001, and security best practices.
Excellent analytical, problem-solving, and troubleshooting skills with strong attention to detail.
Strong verbal and written communication skills with the ability to explain technical security concepts to non-technical audiences.
Ability to manage multiple priorities, maintain confidentiality, and work effectively both independently and as part of a cross-functional team.

EDUCATION AND WORK EXPERIENCE:
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field required; equivalent experience may be considered.
15 years of experience in cybersecurity, systems administration, network administration, or a related information technology role.
Experience supporting enterprise security technologies, vulnerability management, endpoint protection, identity management, or security monitoring preferred.
Familiarity with Microsoft 365 security, Active Directory/Entra ID, AWS, Reliaquest and enterprise networking concepts preferred.
Industry certifications such as Security+, CySA+, SSCP, GSEC, CISSP (or the ability to obtain one within a defined timeframe) are preferred.

PHYSICAL DEMANDS:
Work is primarily performed in an office environment utilizing a computer and standard office equipment.
Requires prolonged periods of sitting and working at a computer workstation.
Frequently requires the use of hands and fingers to operate a computer keyboard, mouse, and other office equipment.
Requires visual acuity to talk, hear, view computer screens, analyze data, review reports, and perform detailed work.
May occasionally be required to lift, carry, push, or pull items weighing up to 25 pounds, and reach with hands and arms.

Equal Opportunity Employer, including disability and protected veteran status