Cybersecurity Specialist

The Syrian Arab Red Crescent (SARC) is an independent humanitarian organization of public utility, is permanent and continuous, and has a legal entity and enjoys financial and administrative independence. SARC was founded in 1942 according to the decrees No/540/ 1942 and No/117/ 1966 which regulate the Organization’s work. It was recognized by the International Committee of the Red Cross in Geneva (ICRC) in 1946, and is committed to upholding the Geneva Conventions and the seven Fundamental Principles of the International Movement of Red Cross and Red Crescent National Societies.

The Syrian Arab Red Crescent is seeking to recruit a “Cybersecurity Specialist”

Interested candidates are requested to send their updated CV in English and must be PDF file only, otherwise will be rejected To: career@sarc-sy.org

Should write the position you apply for in the Subject.

• Based In Damascus – Abou Remmaneh. Any resume without Subject will be automatically rejected.
• Any resume without Subject will be automatically rejected.
• Vacancy Open Date: 01-Sep-2026 / Vacancy Closing Date: 12-Sep-2026.

  Cybersecurity Specialist

  Job Purpose

  To protect the organization’s digital infrastructure, systems, applications, and networks from cyber threats and attacks, while ensuring the confidentiality, integrity, and availability of information. This role is responsible for implementing security controls, monitoring security events, identifying vulnerabilities, and responding to security incidents in accordance with industry best practices and recognized cybersecurity standards.

  Key Duties and Responsibilities

  1. Secure and administer operating systems, servers and cloud services, particularly Windows and Linux servers.
  2. Implement, review, and maintain firewall policies and security rules.
  3. Support security administration of cloud platforms and Microsoft O365 services.
  4. Monitor Microsoft Defender, Entra ID, Conditional Access, and related security tools.
  5. Review user accounts and privileged access rights.
  6. Ensure implementation of least-privilege principles.
  7. Support Multi-Factor Authentication (MFA) and access control mechanisms.
  8. Monitor privileged account activities.
  9. Conduct security penetration testing and analyze assessment results.
  10. Apply secure application practices based on OWASP Top 10 and CWE standards.
  11. Operate and manage Security Information and Event Management (SIEM) platforms and monitor security alerts.
  12. Manage and maintain Intrusion Detection and Prevention Systems (IDS/IPS).
  13. Analyze security logs and identify suspicious or abnormal activities.
  14. Develop alerting rules and support automated incident response mechanisms.
  15. Respond to cybersecurity incidents, including identification, containment, eradication, recovery, and post-incident analysis.
  16. Document security incidents and corrective actions taken.
  17. Conduct periodic vulnerability assessments, classify vulnerabilities, and coordinate remediation activities based on risk priorities.
  18. Prepare technical reports related to cybersecurity risks, vulnerabilities, and incidents.
  19. Contribute to the development and improvement of cybersecurity policies, procedures, and organizational compliance initiatives.
  20. Conduct cybersecurity awareness and phishing awareness activities.
  21. Support development of security awareness materials and guidance.
  22. Promote cybersecurity best practices across the organization.
  23. Provide technical recommendations to strengthen the organization’s security posture and reduce cyber risks.
  24. Support internal and external audits.

  Educational Qualifications

  • Bachelor’s degree in Information Technology Engineering, Computer Engineering, Information Security, Cybersecurity, or any related field.
  • Professional cybersecurity certifications are highly desirable.

  Required Experience

  • Minimum of two (2) years of proven experience in Cybersecurity, Network Security, System Security, or a related field.
  • Experience with Microsoft O365 security administration is preferred.
  • Experience with enterprise networks, servers, and security technologies.
  • Hands-on experience in security monitoring, incident management, vulnerability assessment, or related cybersecurity projects is preferred.

  Language Requirements

  • Good command of the English language (written and spoken).

  Technical Skills

  1. Linux server administration and hardening.
  2. Firewall management and security policy implementation.
  3. Penetration testing execution and result analysis.
  4. Working knowledge of OWASP Top 10 and CWE security standards.
  5. Experience with SIEM platforms such as Wazuh, ELK Stack, or Splunk.
  6. Administration of IDS/IPS solutions such as Suricata or Snort.
  7. Security log analysis and threat detection.
  8. Experience using vulnerability assessment tools, including:
     • Nessus
     • OpenVAS
     • Nikto
     • Nmap
  9. Vulnerability classification using the CVSS framework and remediation prioritization.
  10. Incident response and cyberattack investigation.
  11. Technical and security reporting.
  12. Strong analytical, problem-solving, and decision-making skills.

  General Requirements

  1. Successful completion of the organization’s technical and practical assessment process.
  2. High level of integrity, confidentiality, accuracy, and professionalism.
  3. Ability to work under pressure and effectively manage emergency security incidents.
  4. Commitment to continuous learning and staying up to date with emerging cybersecurity threats and technologies.
  5. Preference will be given to candidates with direct practical experience in the required technical areas.
  6. Preference will be given to candidates holding recognized professional cybersecurity certifications.