Description

Key Responsibilities

• Lead vulnerability management programs using tools like Qualys VMDR, Rapid7 InsightVM, Nessus, and Burp Suite. Prioritize remediation based on risk scores, business impact, and CMDB asset data.
• Manage and optimize endpoint security solutions including EDR (CrowdStrike, Carbon Black, Microsoft Defender), antivirus, and host-based firewalls across Windows, Linux, and RHEL environments.
• Monitor, correlate, and investigate security events using SIEM platforms (Splunk, QRadar, Microsoft Sentinel) and integrate telemetry from cloud services (AWS CloudTrail/GuardDuty/CloudWatch, Azure Security Center/Monitor, GCP Logging).
• Design and implement SOAR workflows (Splunk SOAR, Cortex XSOAR, Sentinel SOAR) for automated incident response, threat containment, and remediation.
• Conduct threat hunting, forensic investigations, root cause analysis, and provide preventive recommendations for endpoint and cloud-related incidents.
• Administer Privileged Access Management (PAM) using CyberArk CorePAS (safes, credential rotation, session monitoring) and Identity & Access Management solutions (SailPoint IdentityIQ, Active Directory, ADFS, MFA, Conditional Access).
• Support Cloud Security posture management across AWS, Azure, and GCP environments, ensuring compliance with relevant frameworks.
• Perform and support Application Security activities including manual/grey-box penetration testing, static code analysis (HP Fortify, IBM AppScan, Checkmarx), secure code reviews, and OWASP Top 10 remediation.
• Ensure adherence to regulatory and industry standards including NIST CSF 2.0, ISO 27001, PCI-DSS, HIPAA, SOX, and NYCRR 500. Assist in internal/external audits and compliance reporting.
• Automate security processes using Python, PowerShell, and Bash for log parsing, vulnerability reporting, SOAR playbooks, and dashboarding.
• Create and maintain security dashboards and reports using Power BI, Tableau, and SIEM tools for stakeholders and leadership.
• Collaborate with Infrastructure, Application Development, SOC, and GRC teams to drive security initiatives, remediate findings, and improve overall security maturity.
• Contribute to continuous improvement by evaluating new security tools, tuning policies, and recommending enhancements to endpoint, cloud, and application security controls

Key Skills

Education

Bachelor's degree