IT Security Specialist

Proxet is seeking a hands-on IT Security Specialist to design, implement, and operate effective security controls across corporate IT and SaaS ecosystems. The role focuses on endpoint, identity, and SaaS security while ensuring compliance with SOC 2 and ISO/IEC 27001 standards through strong documentation and continuous control improvement.

• Implement and administer MDM, EDR, and IAM controls including device enrollment, endpoint protection policies, hardening, SSO/MFA, and conditional access
• Maintain and continuously improve security baselines for endpoints and corporate SaaS services
• Conduct regular security audits and assessments for compliance with industry standards and regulatory requirements
• Implement SIEM solutions, onboard log sources, maintain ingestion pipelines, and configure alerting
• Perform risk assessments and recommend mitigation strategies
• Manage and respond to security incidents including investigation, containment, eradication, and post-incident analysis
• Support vulnerability and patch remediation workflows
• Develop and maintain internal security policies, procedures, and controls
• Support SOC 2 and ISO/IEC 27001 readiness through evidence maintenance and GRC workflows
• Monitor and mitigate phishing, malware, and cyber threats
• Collaborate on secure onboarding of systems and vendors

• 3+ years of hands-on experience in IT service/outsourcing company as IT Security/SecOps specialist
• Proven hands-on experience implementing and administering CrowdStrike Falcon, ManageEngine Endpoint Central, and Okta IAM in real environments
• Strong understanding of endpoint and identity security fundamentals including device hardening, patching, MFA/SSO, conditional access
• Hands-on experience with SIEM/log aggregation including implementation, log source onboarding, and alerting configuration
• Solid understanding of SaaS security
• Experience with Google Workspace security administration at scale
• Practical familiarity with SOC 2 and ISO/IEC 27001 concepts and operational routines
• Experience investigating security events and conducting root cause analysis
• Basic scripting knowledge in Bash, Python, or PowerShell
• Strong analytical and troubleshooting skills with logs, alerts, and telemetry
• Technical writing and documentation skills for policies, standards, and playbooks
• Upper intermediate English proficiency or higher
• Ability to work independently and as part of a team
• Plus: Familiarity with GDPR, HIPAA, PCI DSS; experience in data-intensive projects

No specific schedule, location, or benefits information provided in the job posting.