|
Daily Responsibilities
|
- Implement and maintain enterprise security controls aligned with NIST SP 800-53 and enforce Zero Trust Architecture principles under NIST SP 800-207, including least privilege, identity-centric security, continuous verification, segmentation, and protection across cloud, network, and endpoint environments.
- Design, implement, and maintain least-privilege access controls and IAM solutions, including RBAC, PAM, MFA, secure authentication, authorization, and integration with enterprise identity providers.
- Configure and maintain centralized logging, monitoring, audit, and threat detection capabilities across systems, applications, cloud platforms, and security tools, including SIEM, EDR/XDR, and cloud-native security platforms.
- Conduct continuous security monitoring, vulnerability assessments, risk analysis, and RMF-aligned remediation across enterprise environments; identify security gaps and coordinate mitigation, patch management, and security update activities.
- Harden systems, applications, cloud, and hybrid environments using secure configuration baselines and industry best practices, including encryption standards, secured administrative access, identity controls, network protections, and workload security.
- Support incident response activities by monitoring alerts, performing analysis, executing containment actions, assisting with forensic data collection and reporting, and performing root cause analysis for security incidents and control failures.
- Ensure security changes follow formal change management processes with documentation and security impact analysis; develop and maintain cybersecurity SOPs, system configurations, security baselines, asset inventories, and audit-ready documentation.
- Collaborate with network, cloud, and application teams to resolve security issues, support security integration, limit lateral movement, protect sensitive data and high-value assets, and enhance the overall enterprise security posture.
|
|
Requirements:
|
- Experience supporting enterprise cybersecurity operations across cloud, on-premises, and hybrid environments.
- Experience applying NIST SP 800-53 and NIST SP 800-207 to security controls, Zero Trust, least privilege, continuous monitoring, and risk mitigation.
- Experience with IAM technologies, including RBAC, PAM, MFA, authentication, authorization, and enterprise identity provider integration.
- Experience using SIEM, EDR/XDR, logging, monitoring, and threat detection platforms to support incident response, investigation, forensic support, and root cause analysis.
- Knowledge of vulnerability management, security hardening, patch coordination, RMF-aligned remediation, and secure configuration baselines.
- Ability to develop cybersecurity SOPs, security documentation, configuration records, baselines, asset inventories, and audit artifacts.
- Ability to coordinate with network, cloud, application, and engineering teams to resolve security issues and improve enterprise security operations.
|
