Security Monitoring Incident Response

- Monitor security s using SIEM EDR and XDR tools
- Investigate and respond to security incidents end-to-end including containment and remediation
- Lead post incident analysis and document lessons learned

Threat Detection Threat Hunting

- Perform proactive threat hunting using logs endpoint telemetry and network data
- Develop and tune detection rules aligned with MITRE ATTCK
- Convert threat hunting findings into new detection use cases

Vulnerability Exposure Management

- Conduct vulnerability scans and assess risk severity
- Track remediation with infrastructure and application owners
- Validate fixes and ensure closure within defined SLAs

Security Engineering Hardening

- Implement and maintain security baselines for Windows Linux Active Directory O365 and cloud platforms
- Harden endpoints servers network devices and cloud workloads
- Support purple team and ...