Responsibilities

The administration, configuration, and continuous improvement of AiGC's cybersecurity platforms, including endpoint detection and response (EDR), security information and event management (SIEM), data security, network security, DNS security, and related security technologies

Security monitoring and threat detection activities, including investigating alerts, identifying suspicious activity, conducting threat hunting, and improving the effectiveness of detection rules, dashboards, and monitoring capabilities

The response to cybersecurity incidents, from investigation and analysis through containment, remediation, recovery, and post-incident improvements, helping protect critical systems, data, and services

Security automation and operational excellence by developing and maintaining runbooks, scripts, workflows, and playbooks that improve efficiency, consistency, and response times

The implementation and ongoing optimization of data protection controls, including data classification, monitoring, and loss prevention capabilities that support regulatory and business requirements

The security and integrity of network and perimeter controls, including firewalls, DNS security services, web filtering, and remote-access technologies, ensuring controls remain effective and aligned with evolving threats

Collaboration with Managed Security Service Providers (MSSPs), technology teams, business stakeholders, and external partners to resolve complex security issues, strengthen controls, and support operational resilience

Technical compliance, audit, and control validation activities, including evidence management, security control testing, documentation, and support for regulatory and risk management requirements

Serving as a senior technical resource and escalation point for complex cybersecurity issues while contributing directly to the day-to-day operation and maturity of AiGC's cybersecurity program

Qualification

Represents the skills you have

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Endpoint Detection and Response (EDR)Security Information and Event Management (SIEM)Firewall and Perimeter SecurityDNS SecurityMicrosoft PurviewVaronisSecurity Automation and OrchestrationKQLThreat HuntingIncident ResponseCISSPRequired

Post-secondary education in cybersecurity, computer science, information technology, networking, or a related field, or an equivalent combination of education and relevant experience

Five or more years of hands-on experience administering, configuring, monitoring, and troubleshooting EDR and SIEM technologies

Five or more years of hands-on experience supporting firewall, DNS security, network-security monitoring, or related perimeter-security technologies

Three or more years of experience with data security technologies such as Microsoft Purview, Varonis, or comparable platforms

Three or more years of experience developing, testing, troubleshooting, and maintaining security automation, orchestration workflows, scripts, or playbooks

Two or more years of practical experience using KQL or a comparable query language for security monitoring, investigation, reporting, or threat hunting

Experience producing clear technical documentation, including investigation records, configuration standards, procedures, runbooks, and diagrams

An industry-recognized cybersecurity certification such as CISSP, CySA+, GCIH, or a comparable credential that validates advanced, practical hands-on cybersecurity skills