Job description

Company Description

The Company:

Sucafina is the leading sustainable Farm to Roaster coffee company, with a family tradition in commodities that stretches back to 1905. Today, with more than 1,400 employees in 34 countries, we help stakeholders worldwide to find the perfect coffee solutions. We embed technology, innovation, and sustainability throughout the supply chain, creating shared value for all by Investing in Farmers, Caring for People, and Protecting Our Planet. For more information, visit www.sucafina.com.

What are we looking for:

We are looking for entrepreneurs, techies, passionate, eager to learn, humble, with a positive attitude and a high level of integrity People. Flexible and willing to take challenges, work and live in coffee-producing countries, People who want to build expertise and a career in the coffee business and are ready to go the extra mile.

What we offer:

We offer within our pleasant family environment, great opportunities to learn and grow, we offer challenges and exposure to multicultural environments, on-merit base compensation, and free coffee around the clock!

Role Overview:

Support the day-to-day operation of the company’s security controls — monitoring, vulnerability management, application security testing and audit evidence — under the guidance of senior members of the security team, while building towards independent ownership of technical security topics.

Key Responsibilities:

• Security monitoring: triage SIEM alerts, escalating genuine incidents and helping tune rules to reduce false positives.
• Endpoint security: monitor EDR/XDR consoles, check agent coverage and follow up on detections.
• Vulnerability management: run scans, prepare reports and follow up with system owners until findings are closed.
• Patch and configuration: track patch compliance and verify hardening baselines against agreed standards.
• Application security: run scans, triage results with developers and track remediation.
• Firewall and network security: assist with Fortinet FortiGate policy changes, rule reviews and log analysis.
• Identity and access: support access reviews, MFA enrolment and joiner-mover-leaver checks.
• Cloud security: monitor security posture and configuration alerts in Azure.
• Incident support: assist investigations, collect evidence and document timelines and actions taken.
• Audit and compliance support: gather and organize evidence for internal and external audits and keep the findings tracker current.
• Documentation: maintain procedures, asset and control records, runbooks and technical documentation.
• Awareness: help deliver phishing simulations and security awareness material and handle user queries.
• Reporting: prepare recurring security metrics and dashboards for the security team.

Qualifications and Experience:

• Degree in Computer Science, Information Security, Engineering or a related field, or equivalent training.
• 0–3 years of experience in IT or cybersecurity (internships, apprenticeships, SOC or helpdesk experience count).
• Understanding of cybersecurity fundamentals: CIA triad, common attack types, risk, defense in depth.
• Working knowledge of networking (TCP/IP, DNS, VPN, firewalls) and operating systems (Windows and Linux).
• Awareness of application security basics, including the OWASP Top 10.
• Exposure to SIEM, EDR and vulnerability scanning tools.
• Familiarity with at least one cloud platform (Azure) and with Microsoft 365 security tooling.
• Basic scripting ability (PowerShell, Python or Bash) for reporting and simple automation.
• Awareness of security frameworks such as ISO 27001, NIST CSF or CIS Controls.
• Preferred certifications: CompTIA Security+, Microsoft SC-200, Fortinet NSE 1–3, AZ-500, CEH or equivalent.
• Good English, clear written documentation and a collaborative, service-oriented attitude.

Soft skills:

• Excellent organizational skills (ability to prioritize, plan tasks, and respect deadlines).
• Good interpersonal skills.
• Teamwork skills/team spirit.
• Ability to work under stress and respond to tight deadlines.
• High level of autonomy/self-discipline.
• Proactiveness.
• Curious keen to learn and ready for new challenges.
• Ability to work independently.
• Strong willingness to learn and be coached.