Cybersecurity Specialist (SMB) Job Description Template

-

Security Monitoring & Incident Response: Continuously monitor networks, endpoints, and cloud services for signs of intrusion or anomalies, and execute defensive protocols immediately if a breach or attack is detected . Investigate security incidents (e.g. malware infections, unauthorized access) and take lead on containment, eradication, and recovery actions, followed by incident reporting and lessons learned.

-

Risk Assessment & Vulnerability Management: Regularly conduct risk analyses and vulnerability assessments of systems, networks, and applications

. Identify potential weaknesses (e.g. unpatched software, misconfigurations) and prioritize remediation. This includes running or coordinating vulnerability scans (using tools like Nessus) and ensuring timely patch management or workarounds for critical flaws. Document and report findings with recommendations to leadership

-

Implementing Security Controls: Configure, manage, and update security infrastructure with a -secure by default- mindset

. This includes administering firewalls (e.g. pfSense), intrusion detection/prevention systems, antivirus/EDR solutions (e.g. Microsoft Defender, CrowdStrike Falcon), email security filters, and data encryption and authentication measures

. Ensure all systems (workstations, servers, cloud services) follow baseline hardening standards and security policies at setup and through their lifecycle.

-

Identity and Access Management (IAM): Manage user accounts and permissions in systems such as Microsoft 365/Azure AD or Google Workspace. Grant or revoke access based on least privilege principles, monitor for any unauthorized privilege changes, and review access logs

. This includes enforcing multi-factor authentication and periodic access reviews to prevent privilege abuse.

-

Security Awareness & Training: Lead or support initiatives to educate employees on cybersecurity best practices and company policies. Conduct regular training to prevent phishing and social engineering attacks

. Develop simple guidelines for end-users (e.g. safe password practices, recognizing suspicious emails) and foster a culture of security awareness so that staff become a -human firewall.-

-

Policy Development & Compliance: Maintain and update documentation of the organization-s security policies, procedures, standards, and controls

. Help develop new policies or revise existing ones to meet industry standards (e.g. acceptable use, incident response plan, BYOD policy). Ensure that security practices align with any compliance requirements relevant to the business (such as GDPR, PCI-DSS, etc., if applicable), and assist with audits or security questionnaires by providing evidence of controls.

-

Continuous Improvement & Threat Intelligence: Stay up-to-date on current cybercrime tactics, threat trends, and new security tools

. Proactively research emerging threats relevant to the SMB-s industry and environment. Regularly evaluate the effectiveness of defenses and recommend enhancements or new layers of protection

. This may involve collaborating with the IT team to implement new solutions or tuning existing security controls to address evolving risks.