Design, implement, and continuously mature security architecture across endpoint, identity, network, cloud, and email domains * Act as primary to the external MSSP, reviewing and optimizing the Splunk Cloud SIEM and Cribl Stream/Edge data pipeline * Partner with Infrastructure, Cloud Admin, and Client Services teams to review, harden, and implement security controls (Defender for Endpoint, Intune, Proofpoint, Zscaler, Cisco FTD, FortiGate) * Oversee vulnerability management, prioritize remediation with system owners, and manage/quality-assure penetration tests and red-team exercises * Bachelor's degree in IT Security, Cyber Security, Information Systems, or equivalent practical experience * Advanced knowledge of Splunk Cloud SIEM (SPL, use-case development) and Cribl Stream/Edge * Preferred certifications include: CISSP, GIAC (GCIH, GCIA, GCFA, GDSA), Microsoft SC-200/SC-100/AZ-500, AWS Security Specialty, ...
mehr