Key Responsibilities:
- Monitor, detect, and respond to security threats and incidents across networks, systems, and applications.
- Conduct vulnerability assessments , penetration tests, and risk analysis to identify security gaps.
- Develop, implement, and maintain security policies, procedures, and standards .
- Manage and configure security tools such as SIEM, IDS/IPS, firewalls, endpoint protection, and DLP solutions.
- Investigate security incidents by analyzing CloudTrail logs, VPC flow logs, and third-party SIEM data, reducing mean time to detect (MTTD) and respond (MTTR).
- Investigate security breaches and provide detailed incident reports with remediation recommendations.
- Collaborate with IT and business teams to integrate security into IT projects and operational workflows.
- Perform threat intelligence research and proactively recommend security improvements.
- Mentor junior security analysts and provide training on security best practices .
- Ensure compliance with regulatory standards (ISO 27001, GDPR, NIST, etc.).
- Maintain awareness of emerging threats, vulnerabilities, and industry trends .
- Manage AWS and Azure infrastructure Cloud operations
- Designing, Implementing and Managing Microsoft Endpoint Manager (MECM/SCCM)
- Microsoft Intune administration (design, implementation, policy management)
- CISM and Cloud architect certification is a must.