Job description
Responsibilities
Lead implementation and management of endpoint security platforms (EDR/XDR) including tuning, threat detection and response improvements Work closely with SOC team to investigate alerts, respond to incidents and enhance detection rules and playbooks Analyze and act on Indicators of Compromise (Io. Cs) using threat intelligence to proactively detect and mitigate threats Manage and optimize DLP solutions to prevent data exfiltration across endpoints and platforms Implement and maintain platform security controls including DNS security, web filtering and browser security hardening Perform continuous endpoint hardening, vulnerability remediation and attack surface reduction Monitor and respond to DDoS alerts and network-based threats, coordinating with infrastructure teams Lead IAM platform operations including Sail.
Point IGA, PAM solutions and endpoint privilege management Conduct access reviews and regulatory workflows for privileged users Collaborate with risk, cybersecurity, IT and business teams to enforce RBAC and least-privilege access policies Ensure security controls align with policies and regulatory requirements (e.g., BNM Fin.
Tips) Support incident response activities including containment, eradication and recovery Evaluate and implement new security tools, automation and improvements to enhance operational efficiency Maintain technical documentation and operational procedures for security platforms Requirements Minimum 3–5 years of experience in cybersecurity engineering or operations Hands-on experience with EDR/XDR platforms including detection tuning and incident handling Strong experience with DLP, DNS security and endpoint/browser security controls Experience working with SOC team, SIEM tools and threat intelligence feeds Understanding of Io.
Cs, attack techniques and threat hunting concepts Familiarity with network security and DDoS mitigation Experience in vulnerability management and endpoint hardening Experience in IAM/IGA administration, privileged access or enterprise identity management Hands-on experience with PAM solutions and endpoint privilege management is a plus Ability to lead compliance programs, access review initiatives and IAM platform improvements Basic scripting/automation skills (Power.
Shell, Python) is a plus Strong analytical and problem-solving skills