Full-Time Cybersecurity Specialist

This is a broad, high-impact full-time role for someone who enjoys variety and ownership. You’ll spearhead our cybersecurity efforts, strengthen our overall security posture, and own security across penetration testing, vulnerability management, cloud, network, and GRC. You’ll also help the help desk resolve tickets as needed. The ideal candidate is proactive, technically skilled, and able to work independently while managing multiple security responsibilities.What You’ll Do Penetration Testing: Plan and run authorized internal and external tests of web apps, networks, APIs, and related systems. Identify weaknesses and deliver clear findings with recommended fixes. Vulnerability Management: Run regular vulnerability scans, prioritize risks, track remediation to completion, and coordinate patching activities. Cloud Security: Secure AWS, Azure, and/or GCP (including Microsoft 365) environments. Manage IAM, logging, configuration reviews, access controls, and identify/resolve cloud security risks. Network Security: Manage firewall rules, segmentation, VPN, and wireless security. Monitor network security, troubleshoot issues, and implement best practices. GRC: Develop and maintain security policies and procedures. Conduct risk assessments and support audits/compliance efforts (SOC 2, ISO 27001, NIST CSF, HIPAA, or similar). Help Desk Support: Triage and resolve Level 1–3 tickets, including access requests, account issues, endpoint troubleshooting, Windows, Microsoft 365, VPN, Active Directory/Entra ID, and related hardware/software problems. Explain security risks and recommendations in plain language to leadership and non-technical staff. Collaborate with IT and other teams to embed security practices into everyday operations and produce reports/metrics as needed. What We’re Looking For 3+ years of hands-on experience in cybersecurity or IT security. Strong experience with penetration testing and vulnerability management. Hands-on experience with tools such as Nessus, Qualys, Burp Suite, Nmap, Metasploit, Microsoft Defender, or similar. Working knowledge of at least one major cloud platform (AWS, Azure, or GCP) plus Microsoft 365. Solid understanding of networking (TCP/IP, firewalls, VPNs, DNS) and network security practices. Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST, or equivalent. Experience with Microsoft 365, Azure, Active Directory, and Entra ID. Ability to troubleshoot IT support tickets and communicate clearly with non-technical stakeholders. Strong problem-solving skills, the ability to prioritize across many areas, and a proactive ownership mindset. Ability to work independently and take ownership of tasks. Nice to Have Certifications such as Security+, CEH, OSCP, CISSP, or a cloud security certification. Experience with SIEM or EDR tools. Scripting skills (Python, PowerShell, or Bash). This is a full-time, long-term role for a dependable cybersecurity professional who can lead security initiatives, identify and fix issues, improve processes, and provide IT support when needed.