Key responsibilities include: 1) leading monitoring of security tools and systems for anomalies and threats; 2) leading incident response activities such as event triage, investigation, containment, remediation, and root-cause analysis; 3) configuring vulnerability management platforms, performing scans on systems and networks, tracking remediation, configure malware protection, and reporting on risk posture; 4) developing security metrics, KPI/KRI reporting, and risk-related documentation; 5) assessing risks for new and existing technologies, identifying potential impacts, and proposing control improvements; 6) configuring and administering firewalls, network access controls, endpoint security, cloud and data security, identity and email security, and web filtering systems; 7) installing, configuring, and maintaining security hardware and software following best practices, while leading the optimization of security tool configurations and system hardening efforts; 8) supporting the administration of the Security Awareness & Training platform, including designing and executing phishing simulations and training campaigns; 9) developing advanced scripting skills in Python and PowerShell to support threat hunting, automation, and reporting; 10) designing, building, and implementing security solutions; 11) researching emerging technologies and threats and recommending product or service evaluations; 12) developing process improvements; 13) organizing and leading tasks within larger projects, supporting planning and execution, and monitoring project performance metrics and alignment with Statements of Work; and 14) collaborating closely with senior team members, cross-functional partners, and external vendors to ensure the confidentiality, integrity, and availability of company systems and data. Must also have demonstrated experience (which may have been gained concurrently) with each of the following: (1) Designing, implementing, and managing Secure Access Service Edge (SASE) architectures, including integration of Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and SD-WAN technologies to secure hybrid and remote workforces; (2) Working with network security, including network segmentation, secure protocol implementation, intrusion prevention systems (IPS), and advanced threat detection across LAN/WAN and cloud environments; (3) Working with cloud-native security tools (e.g., AWS Security Hub, Azure Defender, Google Chronicle) and securing multi-cloud environments; (4) Using AI/ML-based threat detection tools and platforms, including anomaly detection and behavior analytics and conducting proactive threat hunting using tools such as MITRE ATT&CK, YARA rules, and threat intelligence platforms; and (5) Working with Security Frameworks such as NIST CSF or CIS controls.