Responsibilities

• IT Security Management & Governance
  Support the implementation and continuous improvement of IT security controls within the Microsoft cybersecurity stack.
  Assist in documenting security procedures, standards, and guidelines.
• IT Security Vendor Certification
  Contribute to security vendor assessment and certification processes (e.g., reviewing security documentation, evidences, and test results).
  Help track compliance status and follow-up actions with vendors and internal stakeholders.
• Security Dashboards & Reporting
  Participate in the monthly update of IT security dashboards (e.g., vulnerabilities, alerts, phishing KPIs)
  Assist in consolidating and visualizing key security metrics to support management decisions.
• Phishing Campaigns & Awareness
  Help prepare and execute internal phishing simulation campaigns.
  Support the analysis and reporting of campaign results, identifying trends and areas for improvement.
  Assist in the preparation of cybersecurity awareness materials and training content (presentations, guides, communications).
• Alert & Event Monitoring and Detection Evolution
  Collaborate with the team in monitoring security alerts and events across the Microsoft security ecosystem.
  Assist in triaging alerts, documenting incidents, and contributing to the continuous improvement of detection rules and use cases.
• Vulnerability Management
  Support vulnerability scanning activities, review of scan results, and prioritization of remediation actions.
  Help maintain an up‑to‑date view of the organization’s vulnerability landscape and track remediation progress.
• Ethical Hacking & Password Cracking Initiatives
  Assist in controlled ethical hacking exercises and security assessments under the guidance of senior team members.
  Help in password strength assessments and password‑cracking exercises
• Security Evidence & Documentation
  Contribute to the collection, organization, and documentation of security evidence related to controls, incidents, and remediation activities.
  Support the preparation of reports and documentation for internal and external audits.

Education

Personal Skills

• Excellent English language skills (written and speaking). C1 level is a must.
• Interest in cybersecurity and willingness to learn about security operations, vulnerability management, and security governance.
• Strong knowledge of Microsoft Office 365 tools
• Basic familiarity with the Microsoft cybersecurity stack (e.g., Defender, Sentinel, Entra ID, etc.) is valuable.
Knowledge of scripting or programming (e.g., Python, PowerShell, R) is an asset

Technical Qualifications

• Strong analytical skills for examining security data, identifying patterns, and drawing meaningful insights from logs, alerts, and vulnerability reports.
• Understanding of basic security concepts (e.g., authentication, access control, vulnerabilities, phishing, malware).
  Ability to work with data from various sources (logs, dashboards, vulnerability scanners) and contribute to maintaining
• data quality and consistency.
  Attention to detail to identify anomalies, suspicious activities, and inconsistencies in security information.
• Effective documentation and record‑keeping skills to maintain an organized and accessible repository of security evidence and reports.
• Good communication skills to collaborate with other teams, report findings, and document procedures clearly.
  Proactive attitude, problem‑solving mindset, and curiosity to investigate security issues and propose improvements...