Responsibilities and Accountabilities:
Security Operations Center (SOC) Management: Support daily SOC operations, ensuring effective monitoring support, development of use cases and response to security incidents. Manage application ingestion processes and email security protocols. Support SIEM management, including logging and alerting. Automation Development:
Develop and implement automation solutions for alerts from various security sources ensure firewalls, IDS and EDR tools are working effectively. Streamline processes to enhance the efficiency of security operations and help develop the communication with other team. Threat Modelling:
Conduct threat modelling for applications to identify vulnerabilities and recommend mitigation strategies. Analyze email tickets and develop tooling to improve response times and effectiveness. Provide route cause analysis for threat found and assist remediation. Anti-Malware and Endpoint Detection:
Assist in operational efforts to implement a global strategy for anti-virus (AV) solutions and optimize detection capabilities.
Ensure consistent standards for endpoint detection and response across the organization. Incident Response:
Lead or support incident response efforts using an industry recognized model and report escalations to senior leadership when required. Collaborate with Red, Blue, and Purple teams to conduct penetration testing and improve security posture. Conduct forensic analysis to investigate security incidents and recommend improvements. Proactive Threat Hunting:
Engage in proactive threat hunting to identify potential security threats before they materialize. Collaborate with teams to enhance detection and response capabilities. Reporting and data analysis:
Engage in proactive collaboration across Value Teams working with an agile mindset and assist in the creation of dashboards and reporting for security governance. Assist in the governance of security within cloud infrastructure. Requirements Required:
Bachelo