Security Operations

• Maintain the security infrastructure (Firewalls, IDS/IPS, AV, SIEM, FIM, servers etc)
• Perform firewall operational tasks as approved
• Monitor systems, software and skills to stay ahead of emerging threats: Lead or participate in security investigations and Assist during Incident Response and Recovery activities.
• Maintain and enforce KUBRA’s IT management control framework that defines the institution’s overall approach to IT risk and control
• Participate in on-call rotation to respond, investigate and resolve Security Incidents
• Track and action alerts to ensure proper response is taken by coordinating the work efforts of internal teams and actions required of external service providers.
• Apply understanding of environment and operational issues to work with external or internal parties for implementation or optimization of specific SIEM use cases to help improve detection and response.
• Maintain the vulnerability security digest and provide updates to relevant parties
• Monitor threat feeds and provide regular threat intelligence updates.
• Conduct access control reviews on a case-by-case basis to systems and work with internal and external resources to update user control lists and provide reports.
• Assist in remediation tasks related to audits/penetration tests.
• Participate in internal and external table-top exercises related to cybersecurity.
• Assist in development of process and procedure documents for Security Operations.
• Evaluate and provide guidance to exemption requests as per corporate policy and standards, to advise of risk involved.

Security Operations Analyst

SOC Engineer

Security Operations Lead

Director of Security Operations

Senior Product Manager – AI-Driven Security Operations

Security Incident Response Analyst