| Role Description: |
Design, implement, and manage security tools and solutions (e.g., SIEM, IDS/IPS, firewalls, DLP, antivirus, endpoint protection). Monitor networks and systems for security breaches, and respond to incidents in a timely and effective manner. Conduct vulnerability assessments, penetration testing, and risk analysis. Develop and enforce security policies, standards, and procedures in alignment with industry best practices (e.g., NIST, ISO 27001). Perform regular security audits and ensure compliance with internal and external security requirements (e.g., GDPR, HIPAA, PCI-DSS). Analyze threat intelligence feeds to proactively identify and mitigate risks. Collaborate with IT teams, DevOps, and other stakeholders to integrate security into the software development lifecycle (DevSecOps). Investigate and document security incidents, root causes, and remediation steps. Educate employees on cybersecurity awareness and best practices. |
