Cybersecurity Specialist

Guardian Fueling Technologies - Jacksonville, FL

Full-time

Jacksonville, FL

Repair and Maintenance

About the position

The Cybersecurity Specialist will be a key member of the IT security team, responsible for safeguarding the organization's computer systems, networks, and sensitive data from cyber threats. This role involves identifying vulnerabilities, implementing security measures, monitoring for potential threats, and responding to security incidents. The ideal candidate will have a strong technical background in cybersecurity and the ability to collaborate effectively with other teams to enhance the organization's security posture.

Responsibilities

• Monitor security systems, networks, and applications for signs of potential breaches or security threats.
• Investigate and respond to security incidents, including unauthorized access attempts, malware infections, or data breaches.
• Conduct root cause analysis to identify vulnerabilities and recommend mitigation strategies.
• Develop and execute incident response plans to minimize impact and recover from security events.
• Implement and maintain security tools, such as firewalls, IDS/IPS, antivirus software, encryption systems, and endpoint protection solutions.
• Collaborate with system administrators and IT teams to ensure secure configurations of servers, databases, and applications.
• Manage and monitor access control mechanisms, including multi-factor authentication (MFA) and role-based access controls (RBAC).
• Conduct regular risk assessments and security audits to identify potential vulnerabilities in the IT environment.
• Perform vulnerability scanning and penetration testing to proactively detect weaknesses in networks, systems, and applications.
• Work with stakeholders to prioritize and remediate identified vulnerabilities and security gaps.
• Assist in ensuring compliance with relevant security standards and regulations.
• Develop, update, and enforce security policies, procedures, and best practices to safeguard the organization's data and IT infrastructure.
• Stay current with emerging security threats, technologies, and industry trends, and ensure the organization's security policies remain up to date.
• Ensure the organization complies with security regulations, laws, and industry standards through regular audits and assessments.
• Provide cybersecurity training and awareness programs to employees to foster a security-conscious culture.
• Educate staff about phishing, social engineering, safe data handling practices, and other security best practices.
• Develop and distribute security documentation, guidelines, and alerts to employees as needed.
• Work closely with IT and operations teams to align security practices with business objectives and regulatory requirements.
• Prepare and present regular reports on security activities, incidents, and overall risk posture to senior management.
• Participate in security-related projects and provide guidance on security considerations for new technologies and system implementations.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent work experience).
• 3+ years of experience in cybersecurity or information security roles, with a strong understanding of security operations and risk management.
• Hands-on experience with security technologies, such as firewalls, IDS/IPS, SIEM tools, endpoint protection, and encryption.
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls).
• Experience with vulnerability scanning tools (e.g., Nessus, Qualys) and penetration testing tools (e.g., Kali Linux, Metasploit) is preferred.
• Proficiency in network security concepts (e.g., VPNs, firewalls, intrusion detection systems).
• Strong understanding of common attack vectors and techniques, such as phishing, SQL injection, ransomware, and DDoS attacks.
• Familiarity with cloud security and securing cloud-based infrastructures (AWS, Azure, Google Cloud).
• Experience with scripting and automation tools (e.g., PowerShell, Python) for security tasks is a plus.
• Familiarity with endpoint security solutions and identity/access management (IAM).

Nice-to-haves

• Certified Information Systems Security Professional (CISSP).
• Certified Ethical Hacker (CEH).
• CompTIA Security+ or equivalent cybersecurity certifications.
• Certified Information Security Manager (CISM) or Certified Information Systems Auditor (CISA) is a plus.