Job Description

Monitor security events, alerts, and logs from various security platforms and systems.Investigate potential threats, suspicious activity, and security incidents.Support the operation and optimization of security monitoring and detection capabilities.Develop and maintain alerting, escalation, and response procedures.Analyze emerging threat trends and recommend appropriate defensive measures.Participate in incident detection, containment, eradication, and recovery efforts.Conduct forensic investigations and root-cause analysis following security incidents.Coordinate with internal stakeholders and external partners during security events.Document incident findings, lessons learned, and remediation recommendations.Assist in the development and testing of incident response plans and playbooks.Perform vulnerability assessments and coordinate remediation activities.Evaluate security findings and prioritize risks based on impact and likelihood.Collaborate with infrastructure, application, and operations teams to resolve vulnerabilities.Validate remediation efforts through testing and follow-up assessments.Support penetration testing activities and security reviews.Design, implement, and maintain security controls across networks and systems.Review network architectures and recommend improvements to reduce security risk.Support segmentation, secure connectivity, remote access, and perimeter security initiatives.Harden systems and services according to security standards and best practices.Evaluate infrastructure changes for potential security implications.Assist with the design and implementation of cloud security controls and policies.Monitor cloud environments for security risks and configuration issues.Support identity, access, encryption, and workload security initiatives.Conduct cloud security assessments and recommend remediation strategies.Collaborate with cloud and engineering teams to implement security-by-design principles.Support user provisioning, privileged access controls, and authentication solutions.Participate in access reviews and governance initiatives.Implement and maintain identity security controls, including multi-factor authentication.Monitor for unauthorized access attempts and suspicious account activity.Assist with role-based access control and least-privilege enforcement.Conduct security risk assessments for systems, projects, and third-party relationships.Assist with policy development, security standards, and governance initiatives.Support audit readiness and compliance-related activities.Track remediation plans and provide security recommendations to stakeholders.Promote security awareness and secure practices across the organization.Design and implement technical security controls and solutions.Evaluate new technologies and security tools.Participate in architecture reviews for infrastructure, applications, and cloud platforms.Develop automation and process improvements to increase security efficiency.Create and maintain security documentation, procedures, and technical standards.

Job Tags

Similar Jobs