Senior It Security Specialist

Electric Mind is a technology consulting firm helping organizations execute complex transformations. As a Senior IT Security Specialist, you will design and implement scalable, secure technology solutions across network, endpoint, application, and compliance security domains, working with both startups and global enterprises on mission-critical security initiatives.
What You'll Do
Deploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control;
operate and tune intrusion prevention systems (IPS) and investigate alerts
Administer antivirus, endpoint protection (EPP/EDR), anti-spam and email security controls;
manage data loss prevention (DLP) policies across email, endpoints and cloud storage
Plan and conduct penetration tests;
integrate static (SAST)and dynamic (DAST) application security testing into development pipelines;
triage findings and track remediation
Maintain controls and evidence for compliance frameworks (ISO 27001, SOC 2, NIST CSF, PCI DSS);
prepare for and supportaudits and security assessments
Participate in incident response investigations;
mentor junior team members;
report on security posture and risks to IT leadership
What You Need
5–10+ years of experience in IT security, with significant time in security and compliance roles
Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems
Experience administering DLP, antivirus/endpoint protection, anti-spam/email security platforms and deploying 2FA/MFA solutions
Proven ability to perform penetration testing and run SAST/DAST tools, interpret results and drive remediation
Working knowledge of compliance frameworks (ISO 27001, SOC 2, NIST CSF, PCI DSS) and solid understanding of TCP/IP, routing, VPNs, Active Directory, Windows and Linux systems
Nice to Have
Experience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates and security policy
Cloud security knowledge in AWS, Azure or Google Cloud: identity and access management, network security groups, logging and CSPM
Familiarity with SIEM platforms, log correlation and ITIL change management standards
Exposure to zero trust architecture, secure remote access and DevSecOps practices
Certifications: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE (Palo Alto), AWS Security Specialty, Azure Security Engineer (AZ-500) or CCSP
#J-18808-Ljbffr