• Proven experience of at least 2 years in the Information Technology (IT) industry

• Knowledge of cybersecurity principles, practices, and technologies.

• Strong communication, and interpersonal skills.

• Excellent problem-solving abilities and a proactive approach to issue resolution.

• Security focused Microsoft Certification’s preferred (SC-900, SC-300, SC-200, SC-401, SC-100)

• Knowledge of cloud and hybrid security environments, including Microsoft 365 and Azure.

• An understanding of operational security controls including EDR/XDR, SIEM platforms (e.g., Microsoft Sentinel), identity protection.

• A collaborative team player who remains proactive and composed while contributing effectively to high-pressure situations.

• Ambition to develop with a thirst for knowledge

Technical Responsibilities

· Monitor and improve Microsoft Secure Score by implementing recommended security controls and remediation actions across Microsoft 365 and Azure environments.

· Assist in aligning systems with Center for Internet Security (CIS) Baselines to ensure secure configuration and system hardening best practices are applied.

· Support vulnerability identification, prioritization, and remediation using Qualys, coordinating onboarding into the software and continued patch management efforts to address detected security weaknesses.

· Contribute to achieving and maintaining compliance with Cyber Essentials and Cyber Essentials Plus audits by implementing required technical controls, manage and reduce client’s vulnerabilities to be in line with CE/CE+ requirements.

Client Relationship Management

· Build and maintain strong client relationships by communicating vulnerability findings clearly, providing remediation guidance, managing patching expectations, and delivering regular updates on vulnerability management progress and risk reduction efforts.