Senior Specialist – InfoSec Ops Management

Job Purpose

Key Responsibilities

• Lead daily operation, administration, and lifecycle management of assigned security platforms.
• Design, implement, test, and tune data protection, access-control, endpoint, detection, and network-security policies.
• Monitor platform and agent/sensor health, policy deployment, event ingestion, integrations, capacity, and licensing dependencies.
• Investigate alerts and service issues; coordinate containment, recovery, escalation, and root-cause analysis.
• Maintain privileged-access controls, including account onboarding, credential governance, session monitoring, access reviews, and emergency access.
• Maintain endpoint/XDR coverage, validate telemetry, investigate events, and coordinate approved response actions.
• Operate deception, IDS, and IPS controls and tune policies and exceptions.
• Integrate telemetry with SIEM, ITSM, and approved monitoring or case-management services.
• Manage technology changes through assessment, testing, approval, implementation, rollback planning, and validation.
• Maintain SOPs, runbooks, architecture records, baselines, inventories, access matrices, and recovery procedures.
• Report on coverage, availability, incidents, exceptions, risks, backlogs, and remediation; support audits and risk assessments.
• Mentor supporting engineers, ensure knowledge transfer and backup readiness, and provide first-level backup for database activity and API security monitoring.

Required Experience and Skills

• 10+ years of information security, security engineering, or security operations experience.
• Deep hands-on experience in at least two of DLP/information protection, PAM, endpoint/XDR, deception, or IDS/IPS; working exposure to remaining domains is preferred.
• Experience designing and tuning policies, classifiers, detection logic, thresholds, exceptions, and response actions.
• Experience with security integrations, APIs, event forwarding, SIEM, ITSM, and incident workflows.
• Strong understanding of least privilege, data classification, endpoint telemetry, and network-security controls.
• Ability to troubleshoot platform, connector, agent, sensor, policy, and event-ingestion issues.
• Strong documentation, reporting, stakeholder-management, and mentoring skills.

Education and Preferred Credentials

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Relevant professional certification in information security, security management, or audit is preferred.
• Capability-based certifications in data protection, privileged access, endpoint/XDR, or network security are advantageous.
• IT service management certification is advantageous.

Success Measures