Job Description

Responsibilities:

• Conduct security assessments and risk analysis to identify vulnerabilities within the organization’s IT infrastructure.
• Implement, configure, and maintain security solutions, including Varonis SaaS, Mimecast, SecureWorks XDR and VDR, Cato Platform and Firewalls, Cato EPP, Cisco AMP, and Cisco Umbrella.
• Monitor and analyze security systems, identifying and responding to potential threats and incidents in a timely manner.
• Investigate security incidents, conduct forensic analysis, and implement corrective actions.
• Develop and maintain security policies, procedures, standards, and runbooks.
• Collaborate with cross-functional teams to ensure security best practices are integrated into all IT processes.
• Use threat hunting techniques to proactively identify and neutralize threats.
• Leverage cloud platforms (AWS, Azure) for security solutions and operations.
• Maintain a strong understanding of industry best practices and emerging threats.
• Use tools like LucidChart to create clear and concise security documentation and diagrams.
• Communicate complex technical information effectively to both technical and non-technical audiences.
• Collaborate within the organization using tools such as Microsoft Teams, OneDrive, and SharePoint.

Qualifications:

• Bachelor’s degree in computer science, Information Security, or a related field, or equivalent practical experience.
• 3–5 years of experience in information security with a focus on threat detection and response.
• Hands-on experience with enterprise security tools such as Varonis SaaS, Mimecast, SecureWorks XDR/VDR, Cato Platform and Firewalls, Cato EPP, Cisco AMP, and Cisco Umbrella.
• Working knowledge of cloud security architecture (AWS, Azure).
• Familiarity with Linux administration; experience with Kali Linux is a plus.
• Strong analytical and problem-solving skills.
• Strong attention to detail and ability to work under pressure.
• Good written and verbal communication and interpersonal skills.
• Ability to thrive in a fast-paced, dynamic environment.

Preferred Qualifications:

• Certifications such as CISSP, CISA, CEH, CHFI, CISM, Security+, or CySA+.
• Experience with incident response and digital forensics.
• Scripting experience with Python, PowerShell, or Bash.