Associate Security Operations Specialist

Assist in conducting vulnerability assessments and penetration tests across infrastructure, networks, cloud environments, web applications, and APIs.

Perform authenticated and unauthenticated scans to identify security weaknesses, misconfigurations, and exposure risks.

Learn and utilize industry-standard tools such as Nessus, OpenVAS, Metasploit, and similar security testing platforms.

Support manual validation of identified vulnerabilities to reduce false positives.

Assist senior team members in analyzing findings, determining risk severity, and prioritizing remediation actions.

Help prepare clear and actionable vulnerability assessment and penetration testing reports.

Contribute to the development and continuous improvement of vulnerability management processes, workflows, and standard operating procedures (SOPs).

Track remediation progress and validate fixes through re-testing activities. Web Application Firewall (WAF) Management

Support the configuration, deployment, and day-to-day management of Web Application Firewalls protecting internet-facing and internal web applications.

Assist in implementing security rules to defend against common web attacks such as SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), file inclusion, and bot-based attacks.

Monitor WAF logs, alerts, and dashboards to identify suspicious or malicious activity.

Assist in investigating WAF alerts and escalating potential incidents as per defined procedures.

Support fine-tuning of WAF policies to balance strong security controls with minimal impact on legitimate business traffic.

Collaborate with application developers and DevOps teams to ensure secure application design and adherence to security best practices.

Assist in documenting WAF configurations, rule changes, and exception handling processes. Log Analysis and SIEM Operations

Gain hands-on experience analyzing security logs from multiple sources including firewalls, IDS/IPS, servers, endpoints, applications, and cloud platforms.

Learn to operate and analyze data using SIEM and log management tools such as Splunk, ELK Stack (Elasticsearch, Logstash, Kibana), and Graylog.

Assist in correlating log data across multiple sources to identify anomalies, suspicious behavior, and potential security incidents.

Support the creation, tuning, and maintenance of custom queries, alerts, and dashboards for enhanced visibility.

Assist senior analysts in root-cause analysis and forensic investigation based on log evidence.

Ensure log integrity, retention, and compliance with internal policies and regulatory requirements. Detection, Monitoring, and Incident Support

Assist in continuous monitoring of security alerts generated by IDS/IPS, SIEM platforms, endpoint protection solutions, and other security tools.

Learn to triage alerts by assessing severity, impact, and likelihood to distinguish between false positives and genuine threats.

Gain understanding of common Indicators of Compromise (IOCs), attack vectors, and adversary techniques.

Support investigation of confirmed incidents and assist in containment, eradication, and recovery activities under guidance.

Contribute to the development, testing, and tuning of detection rules, correlation logic, and signatures.

Assist in maintaining incident response readiness through drills, simulations, and post-incident reviews. Collaboration, Documentation, and Knowledge Sharing

Work closely with SOC analysts, security engineers, IT operations, and development teams to support security initiatives.

Assist in maintaining accurate and up-to-date documentation including playbooks, SOPs, runbooks, and incident response procedures.

Support compliance and audit-related activities by providing required security evidence and documentation.

Participate in internal knowledge-sharing sessions, cross-training programs, and continuous improvement initiatives.

Stay updated with emerging threats, vulnerabilities, tools, and industry best practices.

Experience: 6 months to 4 years in Information Security / Cyber Security / SOC / VAPT

Vulnerability Assessment & Penetration Testing (VAPT)

Authenticated & Unauthenticated Vulnerability Scanning

Hands-on with tools such as Nessus, OpenVAS, Metasploit

Understanding of OWASP Top 10 vulnerabilities

Web Application Firewall (WAF) configuration & monitoring

Knowledge of SQL Injection, XSS, CSRF, and common web attacks

Log Analysis & SIEM Operations (Splunk / ELK Stack / Graylog)

Security Event Monitoring & Alert Triage

IDS/IPS concepts and monitoring

Basic Incident Response & Root Cause Analysis

Indicators of Compromise (IOCs) and threat analysis

Vulnerability reporting and documentation

Network Security fundamentals

Collaboration with SOC, IT, and DevOps teams

IDX isn't your average communications company. With over 20 years industry experience and a portfolio of prominent global clients, our award-winning communication solutions are seen by billions every month across a global audience.

We seek The Bold. Shatter expectations, push boundaries – that's the fuel that ignites our powerhouse team. Collaboration is our superpower, where we bring expertise and individuality to elevate and deliver. Rising Stars with boundless hunger, this is your launchpad. Seasoned pros who want to define their Legacy in the industry, this is your home. Be BOLD – Own Your Story at IDX.