Description

Lead security operations and incident response to protect infrastructure and data.

This role is remote.

Responsibilities

• Manage cybersecurity incident management and response procedures, maintaining effectiveness during crises.
• Execute vulnerability and risk management tasks, performing security scans and tracking remediation.
• Author SOC SOPs, playbooks, work instructions, and essential process documentation.
• Implement and harden security environments using cloud or on-prem technologies, including firewalls, WAF, and intrusion detection tools.
• Communicate security and risk implications clearly to technical and non-technical audiences.

Required Skills

• 12+ years of experience in information security.
• Hands-on experience with EDR solutions such as SentinelOne, Symantec, Tanium, or TrendMicro.
• Proficiency with SIEM solutions including Splunk, ArcSight, or Securonix.
• Strong command of Splunk Search Processing Language (SPL), Kusto Query Language (KQL), Elastic DSL, or regex.
• Deep knowledge of cloud security, secure containerization, and directory services like Active Directory or LDAP.
• Experience with encryption, PKI, SSO, and two-factor authentication.
• Ability to script in languages such as Python, Bash, PowerShell, Java, or C++.
• Practical understanding of ISO 27001/27002, NIST, COBIT, or PCI frameworks.
• Proven experience maintaining compliance with GDPR and PCI requirements.

Preferred Skills

• Industry certifications such as CISSP, CISM, CISA, CCNP Security, CEH/OSCP, GCIH, or ITIL V3.
• Specialized certifications in SIEM, SOAR, or EDR technologies.

Key Skills

Education

ANY GRADUATE