Security Lead
- Azure
- SIEM
- Defender
- EDR
- Vulnerability Management
- Incident Response
- Devops
- ISO 27001
- NIST
- PCI DSS
- CISSP
- CISM
- CISA
•   Architecting and implementation of cloud security monitoring platforms Azure Sentinel (SIEM), Defender (EDR/XDR), SentinelOne(EDR), Email Security Solutions
•   Perform as the subject matter expert on Cloud Security solutions for the customer and use the solution's capabilities in the daily operational work for the end customer.
•   Vulnerability Management: Support delivery of the vulnerability management program, including vulnerability scanning, vulnerability assessments, and tracking support for vulnerability remediation
•   Securing overall environments by applying cybersecurity tools and best practices
•   Expertise in Azure Sentinel and DefenderÂ
•   SOC operations, technology support and maintenance
•   Develop and maintain SOC playbooks, standard operating procedures (SOPs), and response plans to ensure efficient and incident response.
•   Lead incident response efforts during security breaches or cyber incidents, coordinating with internal teams and external stakeholders to contain and resolve incidents promptly.
•   Evaluate, select, and implement security tools and technologies to enhance the capabilities of the SOC.
•   Configure and tune security tools to optimize performance, detection accuracy, and minimize false positives.Â
•   Evaluate SOC policies and procedures and recommend updates to management as appropriate.
•   Monitor SIEM/XDR and AV/EDR solutions for attacks, intrusions, and unusual, unauthorized, or illegal activity.
•   Monitor and respond to 'phishing' emails, Fraud s spam, and unwanted or malicious emails.
•   Provide strategic direction and visionary leadership for comprehensive IT security functions, covering cloud, DevOps, infrastructure, network, application, and data security.
•   Execute vulnerability assessments, penetration tests, and security audits to identify and mitigate risks and weaknesses.
•   Formulate, implement, and enforce robust IT security policies and procedures that align with industry standards and best practices.
•   Security audit and framework (ISO 27001, NIST, PCI-DSS) and Ability to perform Internal Audits for different teams
•   Industry standard certifications like CISSP, CISM, and CISA are considered a plus
Security Lead · Bahwan CyberTek