· Security Architecture & Engineering:
o Plan, design, implement, and manage security measures for the protection of the organization’s data, systems, and networks.
o Maintain and optimize core security systems, including firewalls, IDS/IPS, Endpoint Detection and Response (EDR), SIEM, and VPN solutions.
o Collaborate with IT and DevOps teams to ensure the secure design and deployment of new applications and infrastructure.
o Implement and manage system hardening standards across Windows, Linux, and cloud environments.
· Security Operations & Incident Response:
o Monitor networks and systems for security threats and anomalies.
o Lead and participate in security incident response activities, including investigation, containment, remediation, and root cause analysis.
· Vulnerability & Risk Management:
o Conduct regular vulnerability assessments using industry-standard scanners.
o Prioritize and track the remediation of identified vulnerabilities with relevant teams.
o Coordinate and analyze the results of third-party or internal penetration tests, translating findings into actionable remediation plans.
· Policy & Compliance:
o Contribute to the development, enforcement, and updating of security policies, procedures, and best practices.
o Participate in change management processes, ensuring all changes comply with security standards.
o Act as a security subject matter expert, providing guidance and technical support to employees to promote security awareness.
