Graduate Specialist- Cyber Security

CTeBS; Ernakulam; On-site; INR 5,00,000 - 8,00,000; Full time

Job summary

A technology firm in Ernakulam is seeking a Cybersecurity Professional to enhance security operations. You will monitor security incidents, optimize security tools, and ensure compliance. Ideal candidates hold a bachelor's degree and have 1-2 years of experience in cybersecurity. Strong analytical and communication skills are required. This role offers opportunities for continuous learning and collaboration in a dynamic environment.

Qualifications

• 1–2 years of professional experience in cybersecurity operations or related roles.
• Hands-on experience with Secure Email Gateway (SEG) solutions.
• Strong understanding of email authentication protocols.

Responsibilities

• Monitor, detect, and respond to security incidents.
• Administer and support vulnerability management tools.
• Perform root cause analysis (RCA) of security incidents.

Skills

Secure Email Gateway solutions

Email authentication protocols

Vulnerability management tools

EDR platforms

SIEM tools

Analytical skills

Problem-solving skills

Communication skills

Education

Bachelor’s degree in Information Technology, Computer Science, or Cybersecurity

Tools

InsightVM

Qualys

Nessus

SentinelOne

CrowdStrike

Microsoft Defender for Endpoint

Splunk

Elastic

QRadar

Job description

We are looking for a Cybersecurity Professional to strengthen our security operations and safeguard our organization against evolving cyber threats. You will be responsible for monitoring, detecting, and responding to security incidents, as well as implementing preventive measures to improve our overall security posture.

You need to manage and optimize security tools, investigate potential threats, and collaborate with internal teams to ensure compliance, resilience, and readiness

Key Responsibilities

Email Security

• Manage and optimize Secure Email Gateway (SEG) solutions.
• Understand and implement email security protocols (SPF, DKIM, DMARC).
• Investigate and respond to email-based threats such as phishing, spoofing, and business email compromise.
• Work with internal teams to create awareness and train employees on phishing recognition and reporting.

Vulnerability & Patch Management

• Administer and support vulnerability management tools (e.g., InsightVM, Qualys, Nessus).
• Monitor infrastructure to ensure timely updates, patches, and preventive measures.
• Collaborate with IT teams to deploy and validate patches, reducing risk exposure.
• Track remediation progress and generate compliance and vulnerability reports for stakeholders.

Endpoint & Threat Management

• Manage and monitor Endpoint Detection & Response (EDR) tools (e.g., SentinelOne, CrowdStrike, Defender for Endpoint).
• Conduct threat hunting activities to proactively detect suspicious activity.
• Investigate and respond to security alerts, ensuring quick triage and escalation.
• Perform root cause analysis (RCA) of security incidents and recommend corrective actions.
• Fine-tune security tools for alert optimization and reduced false positives.

Incident Response & Monitoring

• Support incident response activities across the enterprise.
• Document incidents, lessons learned, and propose improvements to defenses.
• Monitor SIEM dashboards for anomalies, perform log analysis, and escalate threats as needed.
• Participate in security drills, tabletop exercises, and post-incident reviews.

Governance, Risk & Compliance

• Assist in maintaining compliance with ISO 27001, GDPR, NIST, or other frameworks as applicable.
• Contribute to internal and external security audits.
• Maintain security documentation, playbooks, and standard operating procedures (SOPs).

Continuous Improvement & Collaboration

• Stay updated on the latest cybersecurity threats, vulnerabilities, and best practices.
• Collaborate with cross-functional teams to improve security posture.
• Provide recommendations for enhancing security architecture and controls.
• Contribute to the development and automation of security workflows where possible.

Skills & Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
• 1–2 years of professional experience in cybersecurity operations or related roles.
• Hands-on experience with Secure Email Gateway (SEG) solutions.
• Strong understanding of email authentication protocols (SPF, DKIM, DMARC).
• Practical knowledge of vulnerability management tools (e.g., InsightVM, Qualys, Nessus).
• Experience with EDR platforms (e.g., SentinelOne, CrowdStrike, Microsoft Defender for Endpoint).
• Familiarity with SIEM tools (Splunk, Elastic, QRadar, etc.).
• Knowledge of incident response processes, threat hunting, and RCA.
• Strong analytical, problem-solving, and communication skills.
• Industry certifications (e.g., CompTIA Security+, Microsoft Security Operations Analyst, Splunk Core Certified User) are a plus.