Description

Key Responsibilities:

• Design, implement, and maintain enterprise Information Security and Network Security architectures, controls, and security solutions.
• Monitor, analyze, and respond to security events and incidents using SIEM, SOAR, EDR, and XDR platforms.
• Conduct vulnerability assessments, penetration testing coordination, risk assessments, and remediation activities.
• Perform threat hunting, malware analysis, digital forensics, and root cause analysis for security incidents.
• Configure and manage firewalls, IDS/IPS, VPNs, Web Application Firewalls (WAF), Network Access Control (NAC), and endpoint protection solutions.
• Implement security controls across AWS, Azure, Google Cloud Platform (GCP), and hybrid cloud environments.
• Develop and enforce security policies, standards, procedures, and governance aligned with organizational and regulatory requirements.
• Collaborate with Infrastructure, DevOps, Network, Cloud, and Application Development teams to integrate security throughout the Software Development Life Cycle (SDLC).
• Support compliance initiatives including NIST CSF, ISO 27001, SOC 2, PCI-DSS, HIPAA, CIS Controls, and GDPR.
• Automate security monitoring, compliance reporting, and incident response using Python, PowerShell, or Bash scripting.
• Document security incidents, technical solutions, risk assessments, and remediation plans while supporting enterprise production environments

Key Skills

Education

Bachelor's degree