Key Accountabilities

• Build, tune, and maintain security detections and monitoring across the organization’s security tooling – EDR, endpoint, email, cloud, and network telemetry – mapping detections to the MITRE ATT&CK framework using native tool analytics and available log sources.
• Support security incident response end-to-end – detection, triage, investigation, containment, eradication, recovery, and post-incident review – perform proactive threat hunting and forensic/root-cause analysis, and participate in the on-call response rotation.
• Deploy, configure, maintain, and optimize existing and new security tools across the environment, and monitor their ongoing health and performance.
• Contribute to cloud security across Azure, AWS, and Microsoft 365 – security posture management, secure configuration and hardening, monitoring, and remediation.
• Support the vulnerability management program – scanning, risk-based prioritization, and remediation across endpoints, servers, applications, and cloud – with clear reporting and metrics.
• Administer and improve security controls and system hardening (including Windows server and workstation security), and partner with IT and infrastructure teams on remediation and security architecture.
• Provide technical information security support for audits, risk assessments, and third-party/vendor security reviews in partnership with the GRC team, and collaborate with teammates to share knowledge and improve processes.
• Other special projects and duties as assigned

Minimum Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field (or equivalent experience).
• 5 to 8 years of experience in security engineering, security operations, incident response, and/or vulnerability management.
• Advanced knowledge of endpoint detection and response (EDR), cloud security (Azure/AWS/Microsoft 365), vulnerability management, incident response, and the MITRE ATT&CK framework, including deploying and maintaining security tooling across a hybrid (cloud and on-premises) environment.
• Working knowledge of business-related processes, procedures, terminology, and compliance.
• Analytical thinker with the ability to understand problems, determine root cause, and recommend appropriate solutions.
• Excellent verbal and written communication skills, able to relate complex concepts in a concise and easy-to-understand manner.
• Ability to prioritize and handle multiple projects, often under tight time constraints.
• Ability to work effectively with peers, leadership, and stakeholders in a productive, collaborative environment.
• Ability to understand and comply with confidentiality and privacy rules and protect company property and confidential information
•