US LBM

Site Reliability Engineer

• Serve as the subject matter expert for Microsoft Sentinel (SIEM & SOAR), including rule creation, playbook development, and integration with other security tools.
• Manage and optimize Microsoft Defender for Cloud and Azure Policy to maintain and enhance Azure security posture.
• Design and implement SOAR automation workflows using Azure Logic Apps.
• Build and optimize Kusto Query Language (KQL) queries for detection, threat hunting, reporting, and automation.
• Integrate security controls into DevSecOps pipelines, focusing on Azure DevOps, Terraform, and other CI/CD platforms.
• Implement and maintain application security scanning using Black Duck or similar DAST/SCA tools.
• Developing, implementing, and maintaining IAM systems and solutions
• Troubleshooting, identifying, and resolving technical IAM related issues
• Ensuring that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss
• Identifying, analyzing and resolving system design weaknesses
• Build, implement and support enterprise-class security systems
• Align organizational security strategy and infrastructure with overall business and technology strategy
• Identify and communicate current and emerging security threats
• Implement and maintain security infrastructure elements to mitigate threats as they emerge
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Create solutions that balance business requirements with information and cybersecurity requirements
• Validates IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Conducts or facilitate threat modeling of services and applications that tie to the risk and data associated with the service or application
• Test security systems to ensure they behave as expected
• Use current programming language and technologies to writes code, complete programming and performs testing and debugging of applications
• Define, implement and maintain corporate security policies and procedures
• Respond immediately to security-related incidents and provide thorough remedial solutions and analysis
• Regularly communicate vital information, security needs and priorities to upper management

Cybersecurity Engineer, DevSecOps, Cloud Security