Essential Duties and Responsibilities:

​

• Analyzing and assessing potential security risks that could impact a company’s digital assets. 

• Developing and implementing security measures and protocols to safeguard information against possible cyber-attacks for Microsoft’s ecosystem, including: Windows Servers, Active Directory, Azure, Office 365, ADFS, and Entra ID. 

• Advising on the latest information security standards, including regulatory compliance requirements. 

• Conducting technical audits, including vulnerability scans and penetration tests to ensure security measures are functioning as intended and SOC2 requirements are met. 

• Providing technical advice to team members and other departments on security-related matters. 

• Responding to security breaches and incidents and leading the incident response process or co-leading the incident response process for SOC clients. 

• Training staff on network and information security procedures. 

• Creating, managing, and delivering comprehensive reports on findings and recommendations for: Cyber Security Maturity Assessments 

• Keeping up-to-date with the latest cyber security trends and hacker methodologies to anticipate potential threats and delivering this information to stakeholders in the SOC, Service Delivery Management, leadership, and support groups. 

Skills:​

​

• Risk Assessment: Proficiency in identifying and evaluating security risks. 

• Security Audits: Experience in conducting security audits and vulnerability assessments. 

• Incident Response: Skills in responding to and managing security incidents. ServiceNow Incident Management preferred. 

• Security Frameworks: Knowledge of security frameworks such as NIST, ISO 27001, and CIS. 

• Threat Intelligence: Ability to analyze and utilize threat intelligence data. 

• Penetration Testing: Expertise in conducting penetration tests and ethical hacking. 

• Security Policy Development: Experience in developing and enforcing security policies. 

• Network Security: Proficiency in securing network infrastructures. Firewall best practices. 

• Cloud Security: Knowledge of securing cloud environments (AWS, Azure, Google Cloud). 

• Identity and Access Management: Experience with IAM solutions and practices (EntraID, AAD, Okta, OneLogin). 

• Encryption: Proficiency in encryption technologies and methods (Bitlocker). 

• Regulatory Compliance: Understanding of regulatory requirements such as GDPR, HIPAA, and PCI-DSS. 

• Security Awareness Training: Ability to conduct security training sessions for employees (KnowBe4). 

• Digital Forensics: Skills in conducting digital forensic investigations. 

• Firewall Management: Expertise in configuring and managing firewalls (Meraki, Ubiquiti) 

• Security Information and Event Management (SIEM): Experience with SIEM tools and log analysis (Microsoft Sentinel). 

• Endpoint Security: Knowledge of endpoint protection solutions. 

• Intrusion Detection and Prevention: Skills in using IDS/IPS tools. 

• Communication Skills: Strong ability to communicate complex security concepts to non-technical stakeholders. 

​

PHYSICAL DEMANDS / WORK ENVIRONMENT

• Less than 10% travel required

• Work in clean, pleasant, and comfortable office setting

• Frequent sitting at a desk performing work on a computer

• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions