Security Operations Specialist

About the role

Digicel, a digital connectivity and communications provider serving 25 markets in the Caribbean, Central and South America, has a centralized cybersecurity function overseeing strategy, governance, operations, compliance, testing, budgeting, training, vendor selection and management across its companies. The Security Operations Specialist assesses SIEM and sensor coverage, performs alert and event analysis, vulnerability management, KPI and SLA management, incident investigation and other ad hoc security tasks, while monitoring threat news and coordinating with external security partners and internal IT teams.

Key responsibilities

• Perform level-1 triage of alarms, events and threats escalated by the SOC and globally deployed SIEM
• Action mitigation plans according to SLA against threats such as malware, insider threats and external compromises
• Maintain and troubleshoot security systems on endpoints and user accounts across market networks
• Track tool coverage, assist in new deployments, upgrades and global projects, and report on security non-compliance
• Respond to incidents and guide remediation within SLA, and coordinate with firewall, IDS, access control, email protection and antivirus teams
• Collaborate with IT, technology, service desk and application owners across countries, and report incidents and the threat landscape to the Group Security Operations Manager
• Manage the vulnerability scanning platform, configure scans, run market-level reporting, give remediation guidance and track follow-up
• Help generate findings from security tests, assessments and KPIs, collect evidence for investigations and promote good security practices

Required profile

• Bachelor's degree in IT/Computer Science, or equivalent education and/or experience
• 1+ years in IT/network administration or 1 year in IT security (network security, security operations, compliance)
• Analytical, dynamic, with excellent reporting and documentation skills and ability to prioritize
• Industry-accepted certifications preferred (CISA, CISSP, CISM, GIAC, CompTIA Security+, Azure Fundamentals)

Required skills

• Good knowledge of web servers, Active Directory, mail and file servers, databases, Unix/Linux and Windows
• TCP/IP, network and application security principles, and virtualized/cloud computing (Azure networks)
• Firewall, endpoint protection, system hardening, DDoS protection and intrusion detection systems
• Security vulnerabilities, advisories, attack vectors and countermeasures