Disciplines for this job description include: administer, support, and maintain cybersecurity technology systems (IDPS, proxy, DLP, etc.); threat mitigation; malicious code detection, response, and prevention; operating systems security oversight; local and wide area network security; compliance enforcement; researches emerging threats and vulnerabilities to aid in the identification of network incidents; vulnerability and medical device ioT scanning and reporting; provides incident response support including mitigating actions to contain activity and facilitating forensics analysis when necessary; data leak protection review and reporting; user behavior analytics system management; conducts network monitoring and intrusion detection analysis; conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources; correlates activity across assets (endpoint, network, apps) and environments to identify patterns of anomalous activity; reviews alerts and data from sensors and documents formal, technical incident reports; works with threat intelligence and/or threat-hunting resources; and participates in the production of documentation and management reporting. Other disciplines include ability to communicate technical concepts to a non-technical audience, project multi-tasking; mentoring junior staff; and leading security team in the performance of their assigned disciplines.