Description

You own vulnerability management, endpoint security, and incident response across cloud and on-premise environments. You automate security workflows and ensure compliance with industry standards.

This role is remote.

Responsibilities

• Lead vulnerability management using Qualys, Rapid7, Nessus, and Burp Suite, prioritizing remediation via risk scores and CMDB data.
• Manage EDR solutions (CrowdStrike, Carbon Black, Defender) and host-based firewalls for Windows, Linux, and RHEL.
• Monitor and investigate security events using Splunk, QRadar, or Microsoft Sentinel, integrating telemetry from AWS, Azure, and GCP.
• Design SOAR workflows for automated incident response and conduct threat hunting and forensic investigations.
• Automate security processes and dashboards using Python, PowerShell, and Bash to drive efficiency and reporting.

Required Skills

• 5+ years of experience in cybersecurity with a Bachelor's degree.
• Proficiency in Splunk for SIEM monitoring and log analysis.
• Strong scripting skills in Python, PowerShell, and Bash for automation.
• Experience administering CyberArk PAM and SailPoint Identity Management.
• Knowledge of Active Directory, ADFS, and MFA implementations.
• Understanding of Zero Trust principles and Identity & Access Management.
• Familiarity with cloud security telemetry (AWS GuardDuty, Azure Security Center, GCP Logging).

Preferred Skills

• CISSP, CCSP, CISM, or CompTIA Security+ certifications.
• Experience with SOAR platforms like Splunk SOAR or Cortex XSOAR.

Key Skills

Education

Bachelor's degree