Security Operations Specialist

About Digicel

Digicel is a prominent provider of digital connectivity and communications, operating advanced wireless and fibre networks across 25 countries within the Caribbean, Central, and South America. Serving over nine million users with mobile, home, and corporate solutions, Digicel supports economic engagement and digital inclusion throughout the region. The organization values strong governance, inclusive access, and sustainable value creation, guided by core principles of Diversity, Integrity, Growth, and Innovation. The company employs approximately 5,000 people who strive to make a meaningful impact on customers and communities served.

Role Summary

In alignment with Digicel's 2030 transformation plan to revamp organizational structure and enhance customer experience, cybersecurity has become a centralized function that oversees global strategy, governance, compliance, operations, training, budgeting, vendor management, and security operations across the entire Digicel group.

The Security Operations Specialist will monitor security information and event management (SIEM) systems, analyze alerts, manage vulnerabilities, ensure key performance and service level agreements, conduct incident investigations, and undertake various security-related tasks. The role also includes staying informed of threat and vulnerability updates and coordinating with external security partners and internal teams such as IT and technical staff.

Main Responsibilities

• Perform first-level assessment of security alarms and threats generated by the Security Operations Center and SIEM tools deployed globally.
• Implement mitigation responses promptly as per SLA, addressing threats like malware, insider risks, and external breaches.
• Maintain and troubleshoot security systems deployed across all markets’ network devices, endpoints, and user accounts.
• Monitor coverage of security tools, assist in new deployments, upgrades, and changes, contributing to global security projects.
• Track and report non-compliance issues related to endpoint security, device hardening, Active Directory accounts, and other assigned security areas.
• Respond to and guide remediation of security incidents within defined SLA parameters.
• Coordinate emergency security responses involving firewalls, intrusion detection systems, access controls, email threat protection, and antivirus tools.
• Work collaboratively with technical leaders across all countries, including IT, service desk, technology, and application owners, to address security matters.
• Produce timely and accurate reports on security incidents and the global threat landscape for the Group Security Operations Manager.
• Oversee vulnerability scanning platforms, manage scan configurations, provide market-level reports, recommend remediation strategies, and follow-up on implemented measures.
• Support generation and improvement of results from security assessments, tests, reports, and key performance indicators.
• Promote innovative security best practices throughout Digicel's entities.
• Gather logs and evidence for investigations and provide necessary support.
• Perform additional duties as assigned.

Qualifications and Experience

• Bachelor’s degree in IT, Computer Science, or related field, or equivalent experience.
• One to two years of experience in IT or network administration, or at least one year of experience in IT security domains such as network security, compliance, or security operations.

Technical Skills

• Strong foundational understanding of IT and network systems including web servers, Active Directory, mail servers, file servers, and databases.
• Proficient with Unix/Linux and Windows operating systems and their security aspects.
• Knowledge of network and application security fundamentals.
• Understanding of TCP/IP and common internet protocols and applications.
• Familiarity with cloud computing platforms (IaaS, SaaS, PaaS), Azure networks, and related security measures.
• Experience with network protocols and packet analysis tools.
• Knowledge of security solutions such as firewalls, endpoint protection, system hardening, DDoS protection, and intrusion detection systems.
• Awareness of security issues impacting cloud-based critical infrastructures.
• Understanding of security vulnerabilities, penetration testing techniques, attack vectors, and defenses.
• Possession or pursuit of industry certifications like CISA, CISSP, CISM, GIAC, CompTIA Security+, or Azure Fundamentals is advantageous.

Personal Attributes

• Strong passion for cybersecurity and awareness of emerging threat technologies and tactics.
• Creative thinker with a continuous learning mindset, able to apply new knowledge to enhance security processes.
• Analytical and detail-oriented with excellent ability to prioritize tasks.
• Effective communication skills for reporting and documentation.

Additional Information

This job description outlines the general roles and expectations. It may not encompass all responsibilities, and tasks may be assigned as required. All employees are expected to uphold safety standards and maintain a clean, orderly work environment.