Description

Own security operations, vulnerability management, and data governance initiatives across cloud and on-premise environments.

This role is on-site.

Responsibilities

• Lead vulnerability management programs using Qualys VMDR, Rapid7, Nessus, and Burp Suite, prioritizing remediation via risk scores and CMDB data.
• Administer endpoint security (EDR, AV, firewalls) on Windows, Linux, and RHEL, and manage Privileged Access Management via CyberArk CorePAS.
• Monitor and investigate security events using Splunk, QRadar, and Microsoft Sentinel, integrating telemetry from AWS, Azure, and GCP.
• Automate security workflows and reporting using Python, PowerShell, and Bash, creating dashboards in Power BI and Tableau.

Required Skills

• 15+ years of experience in security operations, vulnerability management, or data governance.
• Proficiency in SIEM platforms (Splunk, QRadar, Microsoft Sentinel) and cloud security telemetry (AWS, Azure, GCP).
• Strong command of Python, PowerShell, and Bash for automation and log parsing.
• Experience with EDR solutions (CrowdStrike, Carbon Black, Microsoft Defender) and PAM tools (CyberArk, SailPoint IdentityIQ).
• Knowledge of identity management (Active Directory, ADFS, MFA, Conditional Access).
• Familiarity with compliance frameworks: NIST CSF 2.0, ISO 27001, PCI-DSS, HIPAA, SOX, NYCRR 500.
• Bachelor's degree in a relevant field.

Key Skills

Education

Bachelor's degree