Title: IT Security Specialist
Company Name: Bashundhara Group
Vacancy: --
Age: At most 48 years
Job Location: Dhaka
Salary: Negotiable
Experience:
Certifications preferred:
CEH
CompTIA Security+
CISM
Strong knowledge of:
Network security principles
Firewalls, VPNs, IDS/IPS
SIEM tools
Windows/Linux server security
Understanding of common attack vectors (phishing, malware, ransomware, SQL injection).
Context
The Security Specialist is responsible for protecting the organization’s IT infrastructure, networks, systems, and data from cyber threats. This role involves monitoring security systems, identifying vulnerabilities, responding to incidents, and ensuring compliance with security policies and standards.
Security Operations
Monitor security tools such as Firewall, IDS/IPS, SIEM, Antivirus, and EDR.
Detect, analyze, and respond to security incidents.
Investigate suspicious activities and perform root cause analysis.
Maintain security logs and generate incident reports.
Vulnerability & Risk Management
Conduct vulnerability assessments and security scans.
Perform penetration testing and risk assessments.
Identify system weaknesses and recommend remediation actions.
Track and manage patching activities.
Access & Identity Management
Manage user access control, authentication, and authorization.
Implement and monitor IAM and PAM solutions.
Ensure proper segregation of duties and least privilege principles.
Compliance & Policy
Ensure compliance with ISO 27001, GDPR, HIPAA, PCI-DSS, or relevant standards.
Assist in developing and updating security policies and procedures.
Support internal and external audits.
Infrastructure & Cloud Security
Secure on-premise and cloud environments (AWS, Azure, GCP).
Review security configurations of servers, databases, and applications.
Implement data encryption and endpoint protection measures.
Awareness & Training
Conduct security awareness training for employees.
Advise management on emerging threats and security improvements.
Other Benefits as per company policy