• Continuous evaluation of several security tools including but not limited to Data Loss Prevention, Vulnerability Management, Identity and Access Management, Web Application Firewall, Email Protection and Endpoint Protection. • Evaluate and implement a Security, Orchestration, Automation and Response software. • Develop and maintain a library of scripts to be leveraged to automate threat hunting, detection, and digital forensics efforts. • Design, implement and refine security detection mechanisms to improve operational efficiency and observability. • Effectively maintain a cloud based SIEM by ensuring relevant logs are ingested and alerts are tuned. • Tasked with leveraging expertise in the area of incident response, this role may also function as the lead incident responder. • Stay up-to-date on the latest threats, vulnerabilities, and security trends to ensure that our organization is prepared to address emerging threats. • Conduct security awareness training by conducting internal phishing campaigns. • Collaborate with internal teams to ensure that secure implementation guidelines are followed. • Participate in an on-call rotation to provide 24/7 support for critical incident escalations.