Responsibilities

Monitor, analyze, and respond to cybersecurity threats and security events across the organization using enterprise monitoring and detection capabilities

Lead cybersecurity incident investigation, containment, eradication, recovery, stakeholder coordination, and post-incident improvement activities

Administer and continuously improve Microsoft Sentinel SIEM, including data connectors, analytics rules, watchlists, automation playbooks, workbooks, dashboards, and threat detection use cases

Monitor and triage alerts from Microsoft Defender XDR, cloud, identity, endpoint, network, and other security technologies to identify malicious activity and reduce organizational risk

Administer, monitor, and optimize enterprise firewall and network security technologies, including firewall policies, security zones, network segmentation, NAT, VPN, IDS/IPS, access controls, rule reviews, and configuration management

Investigate and respond to network-based threats, intrusion attempts, malicious traffic, and security events identified through firewall, IDS/IPS, endpoint protection, and SIEM technologies

Administer and maintain Microsoft Defender for Office 365, Exchange Online Protection, and related email security capabilities to protect against phishing, malware, spoofing, and business email compromise

Develop and maintain email security policies, threat protection rules, block and allow lists, quarantine processes, secure mail routing, and domain protection controls including SPF, DKIM, and DMARC

Coordinate vulnerability management activities, including risk-based prioritization, remediation tracking, exception management, reporting, and validation of technical security controls

Support threat hunting, security architecture reviews, tabletop exercises, operational metrics, playbooks, lessons-learned reviews, and continuous improvement of cyber defence capabilities

How To Apply:

Incase you would like to apply to this job directly from the source, please click here