Description

You will lead security operations, incident response, and risk management across enterprise and cloud environments.

Responsibilities

• Monitor security alerts and respond to incidents using SIEM, EDR, and XDR solutions.
• Perform threat hunting, detect lateral movement, and conduct root cause analysis for security breaches.
• Manage vulnerability assessments, penetration testing, and compliance with ISO 27001, NIST, CIS, GDPR, and HIPAA.
• Implement security controls for AWS, Azure, CI/CD pipelines, and containerized workloads using Docker and Kubernetes.
• Manage IAM policies, Azure AD, SSO, MFA, and Privileged Access Management (PAM).
• Design security architecture and enforce policies, standards, and risk treatment plans.

Required Skills

• 11+ years of hands-on experience in cybersecurity, SOC, incident response, and threat management.
• Proficiency with SIEM (Splunk, Sentinel, QRadar) and EDR (CrowdStrike, Defender ATP).
• Hands-on experience with cloud security in AWS, Azure, or GCP.
• Strong knowledge of IAM, Azure AD, PAM, and RBAC implementations.
• Experience with WAF, API security, firewalls, IDS/IPS, and network security monitoring.
• Familiarity with DevSecOps tools including SAST, DAST, and IaC security.
• Working knowledge of CI/CD pipelines and container security.
• Bachelor's degree.

Preferred Skills

• Experience in OT Security for energy, oil & gas, or manufacturing environments.
• Knowledge of zero trust architecture, micro-segmentation, and MITRE ATT&CK frameworks.
• Experience in Red Teaming and Purple Teaming.

Key Skills

Education

Bachelor's degree