Cyber Security

About Us

We are a fast-growing USA-based ecommerce business specializing in selling [HVAC, restaurant equipment, home appliance, outdoor, and power tool parts]. With thousands of products and online transactions happening daily, we prioritize customer trust and data protection. We are seeking a Cybersecurity Specialist to secure our websites and ensure compliance with international security standards.

Role Overview

The Cybersecurity Specialist will be responsible for safeguarding our ecommerce platforms from cyber threats, implementing protection mechanisms, and ensuring compliance with security frameworks like PCI DSS, GDPR, and CCPA. The role requires strong expertise in web application security, malware prevention, and cloud security (Magento, AWS, Cloudflare, etc.).

Key Responsibilities

Monitor, detect, and respond to security incidents and cyber threats across ecommerce websites.

Perform regular vulnerability scans, penetration testing, and patch management.

Protect ecommerce platforms (Magento, ReactJS, Cloudflare) from OWASP Top 10 threats (SQL injection, XSS, CSRF, etc.).

Ensure PCI DSS compliance for payment gateways (Stripe, PayPal, Authorize.Net, etc.).

Configure and manage firewalls, WAF (Web Application Firewall), IDS/IPS, and DDoS protection.

Investigate malware incidents, remove malicious code, and prevent recurrence.

Develop and enforce security policies, standards, and procedures.

Conduct risk assessments and penetration testing for websites, servers, and databases.

Work with developers (DevSecOps) to integrate security into CI/CD pipelines.

Educate internal teams on cybersecurity best practices (phishing, data protection, password policies).

Required Skills & Qualifications

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.

7+ years of proven experience in cybersecurity, preferably in ecommerce or SaaS platforms.

Strong knowledge of web application security and cloud infrastructure security.

Hands-on experience with security tools: Burp Suite, Nessus, Qualys, Snort, Wireshark, Metasploit.

Experience with Magento, AWS, Cloudflare, Linux servers, SSL/TLS, and DNS security.

Familiarity with SIEM tools (Splunk, ELK, QRadar).

Knowledge of compliance frameworks: PCI DSS, GDPR, CCPA, ISO 27001.

Strong analytical, problem-solving, and incident response skills.

Certifications (preferred but not mandatory): CEH, CompTIA Security+, OSCP, CISSP.