Security Operations Specialist

About the role

Digicel, a digital connectivity and communications provider serving nine million customers across the Caribbean, Central and South America, is hiring a Security Operations Specialist in Kingston. Cybersecurity is a centralized business function covering strategy, governance, operations, compliance, testing, budgeting, training, vendor management and data protection across all Digicel companies. The specialist assesses SIEM and sensor coverage, performs alert and event analysis, vulnerability management, KPI and SLA management, incident investigation and follows up on activities with external security partners and internal IT teams.

Key responsibilities

• Perform level-1 triage of alarms, events and threats escalated by the SOC and globally deployed SIEM, and act on mitigation plans within SLA against malware, insider threats and external compromises
• Maintain and troubleshoot security systems on all market networks, endpoints and user accounts, and track tool coverage and new deployments, upgrades and changes
• Track and report security non-compliance (endpoint coverage, device hardening, AD accounts) and guide remediation within SLA
• Coordinate responses to emergency threats from firewall, IDS, access control, email threat protection and antivirus, and collaborate with IT, service desk and application owners
• Report security incidents and the global threat landscape to the Group Security Operations Manager
• Manage the vulnerability scanning platform, configure scans, produce market-level reports and follow up on remediation
• Support security test findings, KPIs and security practice promotion, collect evidence for investigations and perform other ad hoc duties

Required profile

• Bachelor's degree in IT/Computer Science, or equivalent education and/or experience
• 1+ years in IT/network administration or 1 year in IT security (network security, security operations, compliance)
• Analytical, reporting and prioritization skills
• Certifications such as CISA, CISSP, CISM, GIAC, CompTIA Security+ or Azure Fundamentals preferred

Required skills

• Good knowledge of web, mail, file servers, databases, Unix/Linux and Windows security
• TCP/IP, network and application security principles, and virtualized/cloud security (Azure)
• Firewall, endpoint protection, system hardening, DDoS protection and intrusion detection systems
• Packet analysis tools and familiarity with security advisories and attack vectors