Security Operations

• Incident Detection & Response: Monitor and triage security events from SIEM, endpoints, email, and DLP systems, escalating when needed.
• Threat Hunting: Conduct proactive searches for potential threats using available tools and threat intelligence.
• Threat Intelligence: Track and report on emerging threats, including dark web activity and new attack techniques.
• Email Security: Investigate phishing reports, monitor email security systems, and build or refine prevention rules for new attack techniques.
• Endpoint & SaaS Security: Support incident remediation and enforce controls such as SSO, MFA, and secure data handling.
• Vulnerability Management: Run and track corporate vulnerability scans, coordinate patching, and monitor progress.
• Security Awareness: Improve the training content and monitor completion, contributing to a security-first culture.
• Data Loss Prevention: Investigate DLP alerts and suggest improvements to detection rules.
• Operational Improvements: Fine-tune alerts, reduce false positives, and document repeatable processes.

Security Operations Engineer

Senior Safety and Security Operations Manager

GSOC Analyst

Head of Security Operations

Head of Security Operations