Cyber Security

Role summary

Monitoring, response, and threat hunting

• Monitor and investigate security events using SIEM, EDR, and XDR platforms.
• Lead incident response from triage through containment, eradication, recovery, and remediation; conduct root cause analysis and post-incident reviews.
• Maintain response procedures and playbooks and coordinate stakeholders during incidents and cyber crises.
• Hunt threats using endpoint telemetry, network traffic, and logs; identify malicious activity and indicators of compromise.
• Develop and tune MITRE ATT&CK-aligned detection rules and convert findings into detection use cases and security improvements.

Vulnerability management and security engineering

• Conduct vulnerability assessments, evaluate business impact and severity, and coordinate remediation with infrastructure, cloud, and application teams.
• Validate vulnerability fixes, monitor SLA compliance, and report remediation progress to leadership.
• Design and maintain enterprise security baselines; harden Windows, Linux, Active Directory, Microsoft 365, and cloud environments.
• Support security testing, purple-team exercises, and validation assessments; improve endpoint, server, network, and cloud configurations.
• Manage and optimize SIEM/SOAR, EDR/XDR, firewall, IDS/IPS, WAF, cloud-security, and vulnerability-management tools.

Governance, reporting, and documentation

• Support audits and compliance initiatives, collect evidence, report compliance, and participate in risk assessments and remediation planning.
• Maintain incident documentation, runbooks, and operational procedures; develop dashboards and MTTD/MTTR metrics.
• Prepare executive reports on security events, trends, and security posture, and present findings and recommendations to senior management.

Required qualifications

• Bachelor's degree in Computer Science, Information Security, Cyber Security, Information Technology, or a related discipline.
• 7–10 years of hands-on cybersecurity, SOC, incident response, or threat management experience.
• Proven experience managing enterprise-scale security operations and incident response.
• EMC Networker is identified as a mandatory skill.
• Required technical areas include SIEM, EDR/XDR, firewalls, IDS/IPS, security monitoring, vulnerability management, Windows/Linux security, Active Directory, and cloud security.
• Framework knowledge includes MITRE ATT&CK, NIST CSF, ISO 27001, and PCI-DSS.

Preferred skills and certifications

• Preferred skills include Microsoft Defender for Office 365, email security, DLP, Imperva DAM, security automation, and detection engineering.
• Preferred certifications include CISSP, CISM, CISA, GCIA, GCIH, GCED, Microsoft SC-200/AZ-500, and CompTIA Security+/CySA+.
• PowerShell, Python, and Kusto Query Language are listed under scripting and automation.

About LTM