Description

Key Skills: Security Incident, Microsoft Defender, Cloud Security, Endpoint Security, Identity Access Management, , SIEM, SOAR, EDR

Roles and Responsibilities:

• Manage and maintain security tools across endpoint, cloud, network, identity, and application environments.
• Manage EDR/endpoint security solutions and ensure security agents are deployed and working properly.
• Configure and manage the Microsoft Defender security suite.
• Manage SIEM, SOAR, NDR, and UEBA security solutions.
• Develop and maintain security automation and response workflows.
• Support security incident investigation, response, and threat hunting.
• Manage IAM, including user access, SSO, Conditional Access, and privileged access.
• Manage vulnerability scanning, prioritization, and remediation.
• Implement and manage CSPM and DSPM solutions for cloud and data security.
• Support Azure and AWS cloud security activities.
• Work with MSSPs and act as the internal technical point of contact.
• Participate in security reviews and help improve security standards.
• Maintain security documentation, SOPs, runbooks, and system diagrams.
• Work with infrastructure, cloud, network, application, and IT teams.
• Participate in an on-call rotation for critical security incidents.
• Mentor junior security engineers and share technical knowledge.

Skills Required:

• Strong experience in Cybersecurity Engineering
• Experience with EDR and Endpoint Security
• Experience with Microsoft Defender
• Experience with IAM and Identity Security
• Experience with SIEM and SOAR
• Knowledge of NDR and UEBA
• Experience with Vulnerability Management
• Experience with Cloud Security
• Knowledge of CSPM and DSPM
• Experience with Azure and/or AWS
• Knowledge of SAML, OAuth, and OIDC
• Strong networking and security fundamentals
• Good troubleshooting and problem-solving skills
• Good communication and documentation skills

Certifications

Candidates should have or be working toward relevant certifications such as:

• CCSP
• CISM
• CompTIA Security+
• SC-200
• SC-300
• AZ-500
• AWS Certified Security - Specialty

Preferred Certifications

• PCNSE
• CrowdStrike Certified Falcon Administrator (CCFA)

Nice to Have

• Experience with Microsoft Intune or SCCM
• Knowledge of NIST, MITRE ATT&CK, and Zero Trust
• Experience with DevSecOps / CI-CD
• Experience in healthcare or other regulated industries
• Knowledge of HIPAA and PHI
• Experience with ServiceNow or Jira
• Experience with security automation and scripting

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

• Relevant certifications and equivalent professional experience may also be considered

Key Skills

Education

Any Graduate