Requirements

Expected technologies

NGAV and EDR solutions

SIEM

incident response

Operating system

Windows

Our requirements

• Relevant education and 4-7 years of experience in a security engineering function with a focus on vulnerability management, incident response and endpoint protection technologies. Additional experience, education and training may be considered in lieu of a degree.
• Experience working with NGAV and EDR solutions including design, implementation, monitoring, and incident investigation.
• Hands-on experience with vulnerability assessment tools and technologies.
• Hands-on experience with SIEM and Incident Response.
• Good understanding of security technologies, network protocols and operating systems.
• Ability to think strategically from both offensive and defensive perspectives.
• Strong interpersonal and communication skills for collaborating with technical and non-technical audiences.
• Ability to work effectively in global teams and independently, fluent English language skills.
• Ability to initiate, lead and successfully manage projects from inception to completion.
• Commitment to staying current in the field of Cybersecurity.

Your responsibilities

• Serve as a subject matter expert for IT Security related devices and services.
• Contribute regularly to technical and process documentation.
• Design, implement and maintain endpoint security technologies including NGAV and EDR solutions, to detect, prevent and respond to advanced threats and malware.
• Collaborate with teams to ensure endpoint security tools are properly configured and deployed, aligned with organizations security policies.
• Lead vulnerability assessment initiatives by performing regular scans, analyzing vulnerabilities, and coordinating remediation efforts with stakeholders.
• Configure, monitor, and maintain the SIEM solution to collect, correlate, and analyze the logs from various event sources.
• Lead and/or assist in responding to security incidents including containment, eradication, and recovery efforts.
• Assess and enhance the security posture of the organizations' public cloud environments.
• Implement robust security controls through use of cloud native security services.
• Conduct simulated phishing campaigns to educate employees on recognizing & mitigating phishing threats.